Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-27145 (GCVE-0-2026-27145)
Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-03 12:04
VLAI
EPSS
VEX
Title
Inefficient candidate hostname parsing in crypto/x509
Summary
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
Severity
6.5 (Medium)
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-04 12:34 UTC
Assigner
References
97 references
Impacted products
226 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
0 , < 1.25.11
(semver)
Affected: 1.26.0-0 , < 1.26.4 (semver) |
guessed | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.7-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.7-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.4-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:0.3.8-6.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.0-4.el10_2.5 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.1-2.el10_2.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.5-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:0.3.2-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.4.0-8.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260710105056.a3795dee , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-9.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.26.4-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.22.2-7.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:0.2.7-8.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:0.2.2-1.el9_2.4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:0.2.4-9.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.26.5-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:0.2.7-1.el9_6.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:0.23.0-5.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.2 |
Unaffected:
1787593946 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | external secrets operator for Red Hat OpenShift 1.1 |
Unaffected:
1786614676 , < *
(rpm)
cpe:/a:redhat:external_secrets_operator:1.1::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1786549223 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1787201612 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1786764622 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1787176886 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787238383 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239116 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239595 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786577950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786750700 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786983362 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786664288 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259112 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787264185 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259740 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787260821 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784737366 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784738758 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784677239 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259015 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259059 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259011 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259016 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787258993 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259044 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259047 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259108 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259099 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259126 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259114 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259113 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787195995 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787201646 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1786764601 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787176716 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | Multicluster Global Hub 1.8.1 |
Unaffected:
1785763319 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.8::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260689 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787262214 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260663 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787263584 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784677172 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784638644 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784590741 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259106 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259284 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259310 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787263693 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787183407 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1786976940 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787172840 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787170830 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547792 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547807 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786549537 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787252179 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242135 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242105 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242321 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787243221 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242131 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242099 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242108 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783917963 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1784004914 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1786754425 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704636 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885742 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885559 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784908682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784917979 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885281 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885133 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784953556 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784918113 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921753 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921772 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784953743 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784918117 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885810 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885681 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784908639 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1785316150 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131046 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131063 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131291 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785317214 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1786654871 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8
|
||
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift API for Data Protection |
cpe:/a:redhat:openshift_api_data_protection:1
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 7 |
cpe:/a:redhat:ceph_storage:7
|
||
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | streams for Apache Kafka 2 |
cpe:/a:redhat:amq_streams:2
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-27145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-04T12:34:03.859208Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T12:34:53.136Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.8-6.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.0-4.el10_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.1-2.el10_2.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.2-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.4.0-8.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260710105056.a3795dee",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-9.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.22.2-7.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-8.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.2-1.el9_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.4-9.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-1.el9_6.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.23.0-5.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/perses-rhel9",
"product": "Cluster Observability Operator 1.5.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787593946",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "external secrets operator for Red Hat OpenShift 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786614676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549223",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201612",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764622",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176886",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787238383",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786577950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786750700",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786983362",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786664288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259112",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787264185",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259740",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260821",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784737366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784738758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259059",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259011",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259016",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787258993",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259044",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259047",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259126",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787195995",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201646",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764601",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176716",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785763319",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260689",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787262214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260663",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263584",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677172",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multiclusterhub-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784638644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784590741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259310",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263693",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787183407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786976940",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787172840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787170830",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787252179",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242105",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242321",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787243221",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242131",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783917963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784004914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786754425",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704636",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784917979",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885281",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953556",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953743",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918117",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885810",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885681",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785316150",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131063",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131291",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785317214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786654871",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "unaffected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "unaffected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/logic-rhel9-operator",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/runc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cli",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-crio-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "unaffected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2"
],
"defaultStatus": "affected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-02T22:01:36.954Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-606",
"description": "Unchecked Input for Loop Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-03T12:04:42.684Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"name": "RHBZ#2484207",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53416"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46394"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29980"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39005"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60354"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60315"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36317"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60390"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54427"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60386"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60025"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57488"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49705"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49744"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:55899"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54525"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59557"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54432"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59593"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59579"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59558"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59559"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:61314: Cluster Observability Operator 1.5.2"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:52946: Multicluster Global Hub 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-02T23:01:08.992Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-02T22:01:36.954Z",
"value": "Made public."
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"workarounds": [
{
"lang": "en",
"value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "HostnameError.Error"
},
{
"name": "matchHostnames"
},
{
"name": "Certificate.Verify"
},
{
"name": "Certificate.VerifyHostname"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.11",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.4",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Jakub Ciolek - https://ciolek.dev/"
}
],
"descriptions": [
{
"lang": "en",
"value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-407: Inefficient Algorithmic Complexity",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T22:01:36.954Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/783621"
},
{
"url": "https://go.dev/issue/79694"
},
{
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"title": "Inefficient candidate hostname parsing in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-27145",
"datePublished": "2026-06-02T22:01:36.954Z",
"dateReserved": "2026-02-17T19:57:28.435Z",
"dateUpdated": "2026-09-03T12:04:42.684Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-27145",
"date": "2026-09-03",
"epss": "0.00591",
"percentile": "0.46003"
},
"microsoft_vex": {
"current_release_date": "2026-09-03T01:03:20.000Z",
"cve": "CVE-2026-27145",
"id": "msrc_CVE-2026-27145",
"initial_release_date": "2026-06-06T01:01:30.000Z",
"product_status:known_affected": "4",
"product_status:known_not_affected": "3",
"product_status:under_investigation": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Inefficient candidate hostname parsing in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27145.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-27145\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-06-02T23:16:35.570\",\"lastModified\":\"2026-09-03T13:04:58.747\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"},{\"lang\":\"es\",\"value\":\"(x509.Certificate).VerifyHostname previamente llamaba a matchHostnames en un bucle sobre todas las entradas de Nombres Alternativos del Sujeto (SAN) de DNS. Esto provoc\u00f3 que strings.Split(host, \\\".\\\") se ejecutara repetidamente en el mismo nombre de host de entrada. Con una lista SAN de DNS grande, los costos de verificaci\u00f3n escalaron cuadr\u00e1ticamente en funci\u00f3n del n\u00famero de entradas SAN multiplicado por el recuento de etiquetas del nombre de host. Debido a que x509.Verify valida los nombres de host antes de construir la cadena de certificados, esta sobrecarga ocurr\u00eda incluso para certificados no confiables.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"HostnameError.Error\"},{\"name\":\"matchHostnames\"},{\"name\":\"Certificate.Verify\"},{\"name\":\"Certificate.VerifyHostname\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.7-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.7-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.4-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:0.3.8-6.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.0-4.el10_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.1-2.el10_2.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:0.3.2-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.4.0-8.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260710105056.a3795dee\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-9.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.26.4-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.22.2-7.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:0.2.7-8.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:0.2.2-1.el9_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:0.2.4-9.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:0.2.7-1.el9_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:0.23.0-5.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/perses-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1787593946\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"external secrets operator for Red Hat OpenShift 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"],\"versions\":[{\"version\":\"1786614676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786549223\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787201612\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786764622\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787176886\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787238383\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786577950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786750700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786983362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786664288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259112\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787264185\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259740\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787260821\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784737366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784738758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784677239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259059\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259011\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259016\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787258993\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259044\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259047\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259126\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787195995\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787201646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1786764601\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787176716\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"],\"versions\":[{\"version\":\"1785763319\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787262214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260663\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787263584\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784677172\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multiclusterhub-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784638644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784590741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259310\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787263693\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787183407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1786976940\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787172840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787170830\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786549537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787252179\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242105\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242321\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787243221\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783917963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1784004914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1786754425\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704636\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784908682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784917979\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885281\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784953556\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784918113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784953743\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784918117\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885810\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885681\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784908639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1785316150\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131063\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785317214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1786654871\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/logic-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-volsync-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-crio-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-redfish-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":4.2},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-04T12:34:03.859208Z\",\"id\":\"CVE-2026-27145\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-606\"}]}],\"references\":[{\"url\":\"https://go.dev/cl/783621\",\"source\":\"security@golang.org\"},{\"url\":\"https://go.dev/issue/79694\",\"source\":\"security@golang.org\"},{\"url\":\"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\",\"source\":\"security@golang.org\"},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5037\",\"source\":\"security@golang.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29980\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36317\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39005\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41930\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42080\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46394\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47737\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49705\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49744\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49765\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49770\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53416\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54401\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54427\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54432\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54525\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:55899\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57488\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57649\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59557\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59558\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59559\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59579\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59593\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60025\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60315\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60354\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60386\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60390\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61253\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61314\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:63016\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-27145\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-09-03T08:41:16+00:00",
"cve": "CVE-2026-27145",
"id": "CVE-2026-27145",
"initial_release_date": "2026-06-02T22:01:36.954000+00:00",
"product_status:fixed": "973",
"product_status:known_affected": "67",
"product_status:known_not_affected": "4465",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-01T00:55:34Z",
"cve": "CVE-2026-27145",
"id": "CVE-2026-27145",
"initial_release_date": "2026-06-04T02:27:28Z",
"product_status:known_affected": "73",
"product_status:known_not_affected": "76",
"product_status:recommended": "262",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-27145",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-27145.json",
"version": "22"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.8-6.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.0-4.el10_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.1-2.el10_2.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.2-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.4.0-8.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260710105056.a3795dee\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-toolset:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.22.2-7.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-8.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.2-1.el9_2.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.4-9.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-1.el9_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.23.0-5.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"butane\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787593946\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/perses-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"external secrets operator for Red Hat OpenShift 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786614676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549223\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201612\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764622\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176886\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787238383\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786577950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786750700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786983362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786664288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259112\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787264185\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259740\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260821\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784737366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784738758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259011\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259016\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787258993\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259044\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259047\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259126\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787195995\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764601\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176716\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785763319\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787262214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260663\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263584\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677172\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784638644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multiclusterhub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784590741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259310\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787183407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786976940\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787172840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787170830\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787252179\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242105\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242321\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787243221\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783917963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784004914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786754425\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704636\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784917979\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885281\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953556\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921772\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953743\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918117\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885810\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885681\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785316150\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131063\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785317214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786654871\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection\", \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/logic-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-volsync-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-crio-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-redfish-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 2\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-02T23:01:08.992Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-02T22:01:36.954Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61314: Cluster Observability Operator 1.5.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52946: Multicluster Global Hub 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:55899: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59557: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54432: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59556: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59593: multicluster engine for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59579: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59558: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59559: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-02T22:01:36.954Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-27145\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\", \"name\": \"RHBZ#2484207\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53416\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57482\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46394\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29980\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39005\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41930\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60354\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57649\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60315\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54401\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36317\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61314\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60390\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54427\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60386\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:63016\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60025\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57488\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49705\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49729\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49744\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49765\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49770\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:55899\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59557\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54432\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59593\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59579\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59558\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59559\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \\\".\\\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\\n\\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\\n\\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-606\", \"description\": \"Unchecked Input for Loop Condition\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-09-03T12:04:42.684Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27145\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-04T12:34:03.859208Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-04T12:34:49.559Z\"}}], \"cna\": {\"title\": \"Inefficient candidate hostname parsing in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Jakub Ciolek - https://ciolek.dev/\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.4\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"HostnameError.Error\"}, {\"name\": \"matchHostnames\"}, {\"name\": \"Certificate.Verify\"}, {\"name\": \"Certificate.VerifyHostname\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/783621\"}, {\"url\": \"https://go.dev/issue/79694\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5037\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-407: Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-06-02T22:01:36.954Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-27145\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-03T12:04:42.684Z\", \"dateReserved\": \"2026-02-17T19:57:28.435Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-06-02T22:01:36.954Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:41030
Vulnerability from csaf_redhat - Published: 2026-07-16 14:28 - Updated: 2026-09-03 17:29Summary
Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.4.7 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Threats
Impact
Important
References
100 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.4.7 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41030",
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41030.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update",
"tracking": {
"current_release_date": "2026-09-03T17:29:27+00:00",
"generator": {
"date": "2026-09-03T17:29:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41030",
"initial_release_date": "2026-07-16T14:28:53+00:00",
"revision_history": [
{
"date": "2026-07-16T14:28:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T17:29:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.4.2",
"product": {
"name": "Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ac083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aaec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Adbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784064050"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ab236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aa04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Adcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-41567",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-06-05T02:00:54.488930+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "RHBZ#2485356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
"url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
}
],
"release_date": "2026-06-05T00:35:50.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-43870",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T09:01:02.388589+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "RHBZ#2466671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
"url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
}
],
"release_date": "2026-05-05T07:45:35.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:41036
Vulnerability from csaf_redhat - Published: 2026-07-16 15:12 - Updated: 2026-09-03 17:29Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.1
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.8.1
Details: Releases of Red Hat OpenShift Builds 1.8.1
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x | — |
Vendor Fix
fix
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 | — |
Threats
Impact
Important
References
111 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.8.1",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.8.1",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41036",
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10840",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.8",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.8"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41036.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.1",
"tracking": {
"current_release_date": "2026-09-03T17:29:28+00:00",
"generator": {
"date": "2026-09-03T17:29:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41036",
"initial_release_date": "2026-07-16T15:12:39+00:00",
"revision_history": [
{
"date": "2026-07-16T15:12:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T17:29:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.8.1",
"product": {
"name": "Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.8::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ad8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Adb72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aa99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3Afae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1784191184"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ad18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Ac8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aaad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ace5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Af9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ab66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1783612432"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1783611973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Acaba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1783612714"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1783611805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ad08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1784121108"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1783337391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1783337535"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1783612119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1783612163"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Christopher Lusk"
],
"organization": "North Echo Security Research"
}
],
"cve": "CVE-2026-10840",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2026-04-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants\u0027 Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the OpenShift Pipelines operator where the `tekton-scheduler-rolebinding` grants `system:authenticated` users cluster-wide write access to Kueue and cert-manager resources. This allows any authenticated user to disrupt workload scheduling, manipulate priorities, delete Workload objects, or may overwrite TLS Secrets, such as the default ingress controller certificate, by leveraging cert-manager\u0027s privileges. The vulnerable RBAC objects are deployed regardless of whether the Tekton Scheduler feature is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10840"
},
{
"category": "external",
"summary": "RHBZ#2484720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10840",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10840"
}
],
"release_date": "2026-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "If the Tekton Scheduler feature is not in use, administrators can mitigate this by patching the ClusterRoleBinding to reference a specific ServiceAccount instead of system:authenticated:\n\noc patch clusterrolebinding tekton-scheduler-rolebinding --type=merge -p \u0027{\"subjects\": [{\"kind\": \"ServiceAccount\", \"name\": \"openshift-pipelines-operator\", \"namespace\": \"openshift-operators\"}]}\u0027\n\nIMPORTANT: The OpenShift Pipelines operator\u0027s reconciliation loop may revert this manual patch. Verify that the operator does not reconcile this binding back to system:authenticated after applying the mitigation. If it does, scale down the operator deployment or configure the operator to skip reconciliation of this object.\n\nAlternatively, the ClusterRoleBinding can be deleted if the Tekton Scheduler is not enabled.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T15:12:39+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.0 upgrade to 1.8.1",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0ac4f867b4fbd7035b9b7a6158c134c091946383f3d739aeec71ff15f286f5dd_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:4196be761279241d472c4f73e3c098afdbe711b334613c368119d44baf92eabc_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d18eb2063450f25e7c1bb015372fac90003bb3a6749ce544bfc96cfdb0c28951_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d8e57c472bdf507de76bf7e88dc9895ae32de6394895bee12a34ffb08232f49a_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0595dce81dede2bb7f823fb1e7f3de98865414af8fb30ea3a45a0a5f7a3b8657_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a1c0932f3bc30280e21353541bd7a8ab6a983c8f3dac2774c6e8ba1eb9b14c4_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:c8aece0e34203e38305245f99232ffe74034b6684a1927b04b7dfcdecc6322ee_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:db72c0a0a440464697b1fb1b75ecf1bf0cf51f6b8a6e1ebc48fd5aebe1f14b18_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:526883a7ec90c8748a49de98e0026e4a21a877b125de75c1548109892d97bd6c_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:aad222ffe48442a2da11b6111e7fd60f0296f430f6fb6d6ce46e33c5184fb1da_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:caba28465f7078e4fab08585ad77b6aa52cf87c1d9af26d2f62a719b499cb9e6_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:f9e95dafe5f90bbb4195cf494444bdeba555d1a54ac7392a3dcadf2084e28be0_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:167a23fbe223e5e588ec7f30e5a7a6748c913f4d1b65218305280c3de0b00864_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:343751add5a7fc7c0f0a6911b8238337f163e46c4f312c6c60e56295cb08bf96_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ce5a93d17bec20669e0b050a89cb11f6f9d3296ae734426b275cfb4b7d0be68f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5462fd3e487225983f131e565e6978c6a5ad6ef3474e367405afa0de584254f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fae5ad88d9ac7f97a1b207fd441c24a5fd7d7f6b818bb1fedf0ba0c8bb247e5f_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:045a83220498c646c908c63e4e813327be2c8fe9761db10461926ed6e1b0c027_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a99c51463eb5cadbd636f570aa39b7a0be8a94b34eb722057e31f6d140c5c4ff_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b66220032a25e314676dee1a2fd60fde5591372e3ee383702a0c9d4bba91454d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:d08845514b0108036745ad5471c60671edd447459d830fae558b3c1dee55453c_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3cc88f81ea9859f134b760284e87703769b619735fec3e0a64d40a851fecab2b_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5ce61d2230d475a35ff7ff75950440da4da5c791f00abb01c003cac3bab108c8_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:5fe39506407bae7aae2c2347a9ebeb7113406337a21c3034b1979cb9987f80d9_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:862bf4412106f7caab91c35f1984dce3e6cffb8d3ac78880b42c0ae88328112f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:43e78562af5bfa860073dce43964bfa7610ac6829e68c5806653caca4a59a3c3_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4d0dd2ed1b83a6e0824c94338b57542b605ae9c501d46589655371e94e7ae0b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d54ccefd000d02c26e6e45fdecd46e3f0b052979fcbbd86824fd1df432992bb2_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1b45bf2ee851c2262a0a3e8a23eb8f53f2be0c06a576bfaff48f9877e7278d5_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:499f4dd4158840707a38c9799517f0f1e5a8dc46240de80c268ee44a9b0746ef_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:933e9981fa111241b43b783f349bbb0079b272202b52562c0a17a51d66d1c724_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:9b365b8197980f70bd2bd3ba408846cbf963353db6359e6bd231dc13a590d60b_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f49159053fc303ae7d0cf74a920a3ac7aca6a20e573aad241015dbdb506adb52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:057f8dc25c360cce6a8cc709dc60f9b2526979f027c146c5c67319aae510971c_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:7e22d67492cef1dd5b9e1b0041d1acfe9f1baf98c297bd98acf2b7cc1c583308_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:89a38a1e1df0b5aa897a2a727fa455774fbb59d7bf5b00cbe344eb72d32ec852_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8aa879159597f8a773dcd6fc0a1afe574d8944850d71eb668ec71aa77b356429_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41930
Vulnerability from csaf_redhat - Published: 2026-07-20 11:31 - Updated: 2026-09-03 14:27Summary
Red Hat Security Advisory: rhc security update
Severity
Important
Notes
Topic: An update for rhc is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.
Security Fix(es):
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhc is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41930",
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41930.json"
}
],
"title": "Red Hat Security Advisory: rhc security update",
"tracking": {
"current_release_date": "2026-09-03T14:27:21+00:00",
"generator": {
"date": "2026-09-03T14:27:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41930",
"initial_release_date": "2026-07-20T11:31:40+00:00",
"revision_history": [
{
"date": "2026-07-20T11:31:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T11:31:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:27:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-9.el8_10.s390x",
"product": {
"name": "rhc-1:0.2.5-9.el8_10.s390x",
"product_id": "rhc-1:0.2.5-9.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-9.el8_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"product": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"product_id": "rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-9.el8_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"product": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"product_id": "rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-9.el8_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-9.el8_10.src",
"product": {
"name": "rhc-1:0.2.5-9.el8_10.src",
"product_id": "rhc-1:0.2.5-9.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-9.el8_10?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-9.el8_10.aarch64",
"product": {
"name": "rhc-1:0.2.5-9.el8_10.aarch64",
"product_id": "rhc-1:0.2.5-9.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-9.el8_10?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"product": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"product_id": "rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-9.el8_10?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"product": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"product_id": "rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-9.el8_10?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-9.el8_10.ppc64le",
"product": {
"name": "rhc-1:0.2.5-9.el8_10.ppc64le",
"product_id": "rhc-1:0.2.5-9.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-9.el8_10?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"product": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"product_id": "rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-9.el8_10?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"product": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"product_id": "rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-9.el8_10?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.5-9.el8_10.x86_64",
"product": {
"name": "rhc-1:0.2.5-9.el8_10.x86_64",
"product_id": "rhc-1:0.2.5-9.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.5-9.el8_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.5-9.el8_10.x86_64",
"product": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.x86_64",
"product_id": "rhc-debugsource-1:0.2.5-9.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.5-9.el8_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"product": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"product_id": "rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.5-9.el8_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64"
},
"product_reference": "rhc-1:0.2.5-9.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le"
},
"product_reference": "rhc-1:0.2.5-9.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x"
},
"product_reference": "rhc-1:0.2.5-9.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-9.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src"
},
"product_reference": "rhc-1:0.2.5-9.el8_10.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.5-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64"
},
"product_reference": "rhc-1:0.2.5-9.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64"
},
"product_reference": "rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le"
},
"product_reference": "rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x"
},
"product_reference": "rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.5-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64"
},
"product_reference": "rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64"
},
"product_reference": "rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le"
},
"product_reference": "rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x"
},
"product_reference": "rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.5-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
},
"product_reference": "rhc-debugsource-1:0.2.5-9.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:31:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:31:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debuginfo-1:0.2.5-9.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:rhc-debugsource-1:0.2.5-9.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:42043
Vulnerability from csaf_redhat - Published: 2026-07-20 13:29 - Updated: 2026-09-03 15:19Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.11.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
References
79 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.11.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42043",
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-401",
"url": "https://redhat.atlassian.net/browse/WTO-401"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-406",
"url": "https://redhat.atlassian.net/browse/WTO-406"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-412",
"url": "https://redhat.atlassian.net/browse/WTO-412"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-417",
"url": "https://redhat.atlassian.net/browse/WTO-417"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-424",
"url": "https://redhat.atlassian.net/browse/WTO-424"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-430",
"url": "https://redhat.atlassian.net/browse/WTO-430"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-444",
"url": "https://redhat.atlassian.net/browse/WTO-444"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-453",
"url": "https://redhat.atlassian.net/browse/WTO-453"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42043.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.",
"tracking": {
"current_release_date": "2026-09-03T15:19:36+00:00",
"generator": {
"date": "2026-09-03T15:19:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42043",
"initial_release_date": "2026-07-20T13:29:54+00:00",
"revision_history": [
{
"date": "2026-07-20T13:29:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:19:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.11",
"product": {
"name": "Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.11::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3A79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296203"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3A3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296209"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296183"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296242"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42047
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-09-03 15:19Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.12.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
References
89 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.12.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42047",
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-359",
"url": "https://redhat.atlassian.net/browse/WTO-359"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-402",
"url": "https://redhat.atlassian.net/browse/WTO-402"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-407",
"url": "https://redhat.atlassian.net/browse/WTO-407"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-413",
"url": "https://redhat.atlassian.net/browse/WTO-413"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-418",
"url": "https://redhat.atlassian.net/browse/WTO-418"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-429",
"url": "https://redhat.atlassian.net/browse/WTO-429"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-433",
"url": "https://redhat.atlassian.net/browse/WTO-433"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-448",
"url": "https://redhat.atlassian.net/browse/WTO-448"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-450",
"url": "https://redhat.atlassian.net/browse/WTO-450"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42047.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.",
"tracking": {
"current_release_date": "2026-09-03T15:19:41+00:00",
"generator": {
"date": "2026-09-03T15:19:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42047",
"initial_release_date": "2026-07-20T13:55:38+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:19:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.12",
"product": {
"name": "Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.12::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3A423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784247610"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3Ad32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784247621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784247593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784247667"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42049
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-09-03 15:19Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.15.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
References
86 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.15.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42049",
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-398",
"url": "https://redhat.atlassian.net/browse/WTO-398"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-405",
"url": "https://redhat.atlassian.net/browse/WTO-405"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-410",
"url": "https://redhat.atlassian.net/browse/WTO-410"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-416",
"url": "https://redhat.atlassian.net/browse/WTO-416"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-421",
"url": "https://redhat.atlassian.net/browse/WTO-421"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-427",
"url": "https://redhat.atlassian.net/browse/WTO-427"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-432",
"url": "https://redhat.atlassian.net/browse/WTO-432"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-445",
"url": "https://redhat.atlassian.net/browse/WTO-445"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-454",
"url": "https://redhat.atlassian.net/browse/WTO-454"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42049.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.",
"tracking": {
"current_release_date": "2026-09-03T15:19:38+00:00",
"generator": {
"date": "2026-09-03T15:19:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42049",
"initial_release_date": "2026-07-20T13:55:43+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:19:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.15",
"product": {
"name": "Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.15::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3Ad1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296033"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3Aadfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296045"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296064"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42050
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-09-03 15:19Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.13.0 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 | — |
Workaround
|
Threats
Impact
Important
References
79 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.13.0 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42050",
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-403",
"url": "https://redhat.atlassian.net/browse/WTO-403"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-408",
"url": "https://redhat.atlassian.net/browse/WTO-408"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-414",
"url": "https://redhat.atlassian.net/browse/WTO-414"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-419",
"url": "https://redhat.atlassian.net/browse/WTO-419"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-428",
"url": "https://redhat.atlassian.net/browse/WTO-428"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-434",
"url": "https://redhat.atlassian.net/browse/WTO-434"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-446",
"url": "https://redhat.atlassian.net/browse/WTO-446"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-452",
"url": "https://redhat.atlassian.net/browse/WTO-452"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42050.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.",
"tracking": {
"current_release_date": "2026-09-03T15:19:38+00:00",
"generator": {
"date": "2026-09-03T15:19:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42050",
"initial_release_date": "2026-07-20T13:55:49+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:19:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.13",
"product": {
"name": "Red Hat Web Terminal 1.13",
"product_id": "Red Hat Web Terminal 1.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3Aa6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3A6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296137"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296166"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64 as a component of Red Hat Web Terminal 1.13",
"product_id": "Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64 as a component of Red Hat Web Terminal 1.13",
"product_id": "Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64 as a component of Red Hat Web Terminal 1.13",
"product_id": "Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64 as a component of Red Hat Web Terminal 1.13",
"product_id": "Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:49+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:a6cb6402795d9d9ea0e1b68edcaf59ee008b18b00f91a54aa6686993d47a2a77_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:4b8a34706b2dd9aa95ce68a9bf4813946d311bf7626923a843472b05cfbc8492_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:6791ddb17bc6910099b3277295b24229cec10c0da7b5599d753357673f08c1cd_amd64",
"Red Hat Web Terminal 1.13:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:78241066bb3746b9501e5cfd0ce5b6322b1f908309b5e0b145eac28c73d20662_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42051
Vulnerability from csaf_redhat - Published: 2026-07-20 13:56 - Updated: 2026-09-03 15:19Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.14.0 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 | — |
Workaround
|
Threats
Impact
Important
References
86 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.14.0 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42051",
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-397",
"url": "https://redhat.atlassian.net/browse/WTO-397"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-404",
"url": "https://redhat.atlassian.net/browse/WTO-404"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-409",
"url": "https://redhat.atlassian.net/browse/WTO-409"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-415",
"url": "https://redhat.atlassian.net/browse/WTO-415"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-420",
"url": "https://redhat.atlassian.net/browse/WTO-420"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-425",
"url": "https://redhat.atlassian.net/browse/WTO-425"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-431",
"url": "https://redhat.atlassian.net/browse/WTO-431"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-449",
"url": "https://redhat.atlassian.net/browse/WTO-449"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-455",
"url": "https://redhat.atlassian.net/browse/WTO-455"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42051.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.",
"tracking": {
"current_release_date": "2026-09-03T15:19:38+00:00",
"generator": {
"date": "2026-09-03T15:19:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42051",
"initial_release_date": "2026-07-20T13:56:26+00:00",
"revision_history": [
{
"date": "2026-07-20T13:56:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:19:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.14",
"product": {
"name": "Red Hat Web Terminal 1.14",
"product_id": "Red Hat Web Terminal 1.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.14::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3Af75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296114"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3A83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296122"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296101"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296137"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64 as a component of Red Hat Web Terminal 1.14",
"product_id": "Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64 as a component of Red Hat Web Terminal 1.14",
"product_id": "Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64 as a component of Red Hat Web Terminal 1.14",
"product_id": "Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64 as a component of Red Hat Web Terminal 1.14",
"product_id": "Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.14"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:56:26+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f75d0e6a4629dbfc1ef62aab71892de395e7bd133cb81ae7f9c2a4a618374595_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:122f518c55db3221e08ef3e49dd46892f75d6fbdaffa460c3ce22d8c584f0c93_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:83533e30770c22a25bac7f819f41cdb4b706d8955f464341db7b1ad7c81efa40_amd64",
"Red Hat Web Terminal 1.14:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:82ccda09508a62cc4676a4c1778d7653807ec3cd12defae229989935c5aed999_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42079
Vulnerability from csaf_redhat - Published: 2026-07-20 16:17 - Updated: 2026-09-03 17:29Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)
* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)
* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
* automation-platform-ui: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)
* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)
* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
2 products
Known not affected
192 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
190 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
7.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
184 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
9.0 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
192 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
165 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
192 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
192 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.
7.3 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
192 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
190 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — | ||
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
References
104 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)\n* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)\n* automation-platform-ui: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)\n* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)\n* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42079",
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42079.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-09-03T17:29:30+00:00",
"generator": {
"date": "2026-09-03T17:29:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42079",
"initial_release_date": "2026-07-20T16:17:57+00:00",
"revision_history": [
{
"date": "2026-07-20T16:17:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T16:17:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T17:29:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product_id": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pytest-ansible@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el9ap.src",
"product": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src",
"product_id": "ansible-sign-0:0.1.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product_id": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-tox-ansible@26.6.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product_id": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-1.el9ap.src",
"product": {
"name": "ansible-creator-0:26.6.1-1.el9ap.src",
"product_id": "ansible-creator-0:26.6.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el9ap.src",
"product": {
"name": "molecule-0:26.6.0-1.el9ap.src",
"product_id": "molecule-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-1.el9ap.src",
"product": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.src",
"product_id": "ansible-navigator-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product_id": "ansible-core-1:2.16.19-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el9ap.src",
"product": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src",
"product_id": "ansible-lint-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"product_id": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-importer@0.4.40-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.src",
"product_id": "receptor-0:1.6.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"product_id": "automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.2.10-1.el9ap.src",
"product": {
"name": "automation-eda-controller-0:1.2.10-1.el9ap.src",
"product_id": "automation-eda-controller-0:1.2.10-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.2.10-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"product_id": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.11-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.11.11-1.el9ap.src",
"product": {
"name": "automation-hub-0:4.11.11-1.el9ap.src",
"product_id": "automation-hub-0:4.11.11-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.11.11-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.src",
"product": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.src",
"product_id": "aap-metrics-utility-0:0.7.5-3.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.7.5-3.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"product": {
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"product_id": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.6-8.1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-platform-ui-0:2.6.11-1.el9ap.src",
"product": {
"name": "automation-platform-ui-0:2.6.11-1.el9ap.src",
"product_id": "automation-platform-ui-0:2.6.11-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-platform-ui@2.6.11-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product_id": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"product": {
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"product_id": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260715-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.14-3.el9ap.src",
"product": {
"name": "automation-controller-0:4.7.14-3.el9ap.src",
"product_id": "automation-controller-0:4.7.14-3.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.14-3.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-2:2.16.19-1.el10ap.src",
"product": {
"name": "ansible-core-2:2.16.19-1.el10ap.src",
"product_id": "ansible-core-2:2.16.19-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el10ap?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el10ap.src",
"product": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src",
"product_id": "ansible-sign-0:0.1.6-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-1.el10ap.src",
"product": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.src",
"product_id": "ansible-navigator-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el10ap.src",
"product": {
"name": "molecule-0:26.6.0-1.el10ap.src",
"product_id": "molecule-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product_id": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tox-ansible@26.6.1-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product_id": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pytest-ansible@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-1.el10ap.src",
"product": {
"name": "ansible-creator-0:26.6.1-1.el10ap.src",
"product_id": "ansible-creator-0:26.6.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product_id": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el10ap.src",
"product": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src",
"product_id": "ansible-lint-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.src",
"product_id": "receptor-0:1.6.6-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product_id": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el10ap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product_id": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pytest-ansible@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product_id": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product_id": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-tox-ansible@26.6.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product_id": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-1.el9ap.noarch",
"product": {
"name": "ansible-creator-0:26.6.1-1.el9ap.noarch",
"product_id": "ansible-creator-0:26.6.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "molecule-0:26.6.0-1.el9ap.noarch",
"product_id": "molecule-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"product_id": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product_id": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"product_id": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-importer@0.4.40-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"product_id": "automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.2.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.2.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.2.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.2.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.2.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.11-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.11.11-1.el9ap.noarch",
"product": {
"name": "automation-hub-0:4.11.11-1.el9ap.noarch",
"product_id": "automation-hub-0:4.11.11-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.11.11-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"product": {
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"product_id": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.6-8.1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"product": {
"name": "automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"product_id": "automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-platform-ui@2.6.11-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product_id": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools%2Bserver@26.7.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product_id": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bactivitystream@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bapi_documentation@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bauthentication@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bchannel_auth@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bfeature_flags@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bjwt_consumer@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Boauth2_provider@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brbac@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bredis_client@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bresource_registry@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brest_filters@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260715-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.7.14-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.7.14-3.el9ap.noarch",
"product": {
"name": "automation-controller-server-0:4.7.14-3.el9ap.noarch",
"product_id": "automation-controller-server-0:4.7.14-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.7.14-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"product_id": "automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.7.14-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product_id": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el10ap?arch=noarch\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product_id": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.noarch",
"product_id": "ansible-navigator-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "molecule-0:26.6.0-1.el10ap.noarch",
"product_id": "molecule-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product_id": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tox-ansible@26.6.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product_id": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pytest-ansible@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-1.el10ap.noarch",
"product": {
"name": "ansible-creator-0:26.6.1-1.el10ap.noarch",
"product_id": "ansible-creator-0:26.6.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product_id": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product_id": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product_id": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools%2Bserver@26.7.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product_id": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el10ap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"product_id": "automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"product_id": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"product": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"product_id": "aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.7.5-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.14-3.el9ap.x86_64",
"product": {
"name": "automation-controller-0:4.7.14-3.el9ap.x86_64",
"product_id": "automation-controller-0:4.7.14-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.14-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.14-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"product": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"product_id": "aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.7.5-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.14-3.el9ap.ppc64le",
"product": {
"name": "automation-controller-0:4.7.14-3.el9ap.ppc64le",
"product_id": "automation-controller-0:4.7.14-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.14-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.14-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"product_id": "automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"product_id": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"product": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"product_id": "aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.7.5-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.14-3.el9ap.s390x",
"product": {
"name": "automation-controller-0:4.7.14-3.el9ap.s390x",
"product_id": "automation-controller-0:4.7.14-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.14-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.14-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.s390x",
"product_id": "receptor-0:1.6.6-1.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"product_id": "automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"product_id": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"product": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"product_id": "aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.7.5-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.14-3.el9ap.aarch64",
"product": {
"name": "automation-controller-0:4.7.14-3.el9ap.aarch64",
"product_id": "automation-controller-0:4.7.14-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.14-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.14-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src"
},
"product_reference": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src"
},
"product_reference": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src"
},
"product_reference": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src"
},
"product_reference": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.7.14-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64"
},
"product_reference": "aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le"
},
"product_reference": "aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x"
},
"product_reference": "aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src"
},
"product_reference": "aap-metrics-utility-0:0.7.5-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aap-metrics-utility-0:0.7.5-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64"
},
"product_reference": "aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch"
},
"product_reference": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src"
},
"product_reference": "ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.14-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64"
},
"product_reference": "automation-controller-0:4.7.14-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.7.14-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.7.14-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch"
},
"product_reference": "automation-controller-server-0:4.7.14-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.7.14-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.2.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.2.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src"
},
"product_reference": "automation-eda-controller-0:1.2.10-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.2.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.11.11-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch"
},
"product_reference": "automation-hub-0:4.11.11-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.11.11-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src"
},
"product_reference": "automation-hub-0:4.11.11-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-platform-ui-0:2.6.11-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch"
},
"product_reference": "automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-platform-ui-0:2.6.11-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src"
},
"product_reference": "automation-platform-ui-0:2.6.11-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src"
},
"product_reference": "python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-8643",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-22T23:09:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in pip\u0027s wheel installation process allows for arbitrary file overwrite due to path traversal. An attacker could exploit this by convincing a user to install a specially crafted malicious Python wheel. While file overwrites are limited to the installing user\u0027s permissions, using `pip install` with elevated privileges in Red Hat environments significantly increases the potential impact, potentially leading to system integrity compromise or arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8643"
},
{
"category": "external",
"summary": "RHBZ#2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643"
},
{
"category": "external",
"summary": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb",
"url": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb"
}
],
"release_date": "2026-05-27T17:03:36.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite"
},
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Martin Brodeur"
],
"organization": "Independent security researcher"
}
],
"cve": "CVE-2026-12701",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-24T02:44:10+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490703"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an authenticated administrator can achieve arbitrary file write outside the intended export directory with fully attacker-controlled content. The FilesystemExport API is restricted to admin-level users (in Satellite, authenticated via SSL certificate; in standalone RBAC deployments, admin role only). The Pulp process runs as the \"pulp\" system user (not root), and file permission bits cannot be controlled by the attacker. However, the \"pulp\" user typically has write access to service-critical paths, and attack vectors such as cron.d entries (text-parsed, no exec bit required) or overwriting Pulp configuration remain viable depending on filesystem permissions and SELinux policy. Red Hat Satellite and Red Hat Ansible Automation Hub ship pulpcore and are affected. RHUI is not affected because end users do not have access to Pulp content creation APIs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12701"
},
{
"category": "external",
"summary": "RHBZ#2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12701"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701"
}
],
"release_date": "2026-07-20T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If FilesystemExport was never configured on your deployment, you are not affected by this issue.\n2. If FilesystemExporters exist in the database, audit them for path traversal sequences (\"../\"). Existing malicious entries must be cleaned up manually, as the validation functions documented to raise ValidationError do not actually do so in all code paths.\n3. Restrict admin-level access to the Pulp API to only trusted operators. Review and audit which accounts have administrator privileges.\n4. Ensure SELinux is in enforcing mode on Satellite/Pulp servers to limit the directories the Pulp service user can write to.\n5. Monitor filesystem changes outside of expected Pulp directories for signs of exploitation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42215",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-05-07T19:01:30.789237+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467802"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary command execution flaw in GitPython, a library utilized across several Red Hat products. The vulnerability arises from an incomplete security check that allows specially crafted Python keyword arguments, such as `upload_pack` or `receive_pack`, to bypass intended safeguards against dangerous Git options. This bypass enables an attacker to execute arbitrary commands on systems where applications process untrusted input through GitPython\u0027s repository interaction functions, potentially leading to system compromise, credential theft, or unauthorized data modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42215"
},
{
"category": "external",
"summary": "RHBZ#2467802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467802"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42215"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"
}
],
"release_date": "2026-05-07T18:17:03.194000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks"
},
{
"cve": "CVE-2026-42284",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-05-07T19:01:23.592356+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467800"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in GitPython allows for arbitrary code execution during Git clone operations within Red Hat products that utilize the library. The flaw stems from insufficient validation of user-supplied input to the `_clone()` function, enabling an attacker to inject malicious Git configurations, such as `core.hooksPath`, and execute arbitrary code. Exploitation requires an application to process untrusted input through GitPython\u0027s cloning functionalities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42284"
},
{
"category": "external",
"summary": "RHBZ#2467800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467800"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485"
}
],
"release_date": "2026-05-07T18:19:20.129000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options"
},
{
"cve": "CVE-2026-44244",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-07T19:01:36.732863+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467804"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in GitPython that allows for arbitrary code execution. By injecting newlines into Git configuration values, an attacker can manipulate the `core.hooksPath` to execute malicious scripts during standard Git operations. This poses a significant risk in environments where applications process unvalidated user input when interacting with Git repositories, potentially leading to persistent repository configuration poisoning.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44244"
},
{
"category": "external",
"summary": "RHBZ#2467804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"
}
],
"release_date": "2026-05-07T18:22:39.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications that use GitPython and process untrusted input for Git configuration values must implement robust input validation and sanitization. This prevents the injection of newlines that could manipulate `core.hooksPath` and lead to arbitrary code execution. Additionally, ensure that applications interacting with Git repositories operate with the principle of least privilege to limit the potential impact of any successful exploitation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:17:57+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:aap-metrics-utility-0:0.7.5-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-automation-platform-installer-0:2.6-8.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-creator-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-navigator-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.14-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.14-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-debugsource-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-proxy-server-debuginfo-0:2.6.17-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260715-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-importer-0:0.4.40-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.11-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
}
]
}
RHSA-2026:42080
Vulnerability from csaf_redhat - Published: 2026-07-20 16:01 - Updated: 2026-09-03 17:29Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: An update is now available for Red Hat Ansible Automation Platform 2.7
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)
* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
7.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
114 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
117 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
117 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
117 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
References
37 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Ansible Automation Platform 2.7\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42080",
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42080.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-09-03T17:29:31+00:00",
"generator": {
"date": "2026-09-03T17:29:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42080",
"initial_release_date": "2026-07-20T16:01:12+00:00",
"revision_history": [
{
"date": "2026-07-20T16:01:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T16:01:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T17:29:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.7::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.7::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.7::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"product": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"product_id": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-builder@3.1.1-3.1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-2.el9ap.src",
"product": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.src",
"product_id": "ansible-navigator-0:26.6.0-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-2.el9ap.src",
"product": {
"name": "ansible-creator-0:26.6.1-2.el9ap.src",
"product_id": "ansible-creator-0:26.6.1-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product_id": "ansible-core-1:2.16.19-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el9ap.src",
"product": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src",
"product_id": "ansible-sign-0:0.1.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product_id": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-tox-ansible@26.6.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product_id": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el9ap.src",
"product": {
"name": "molecule-0:26.6.0-1.el9ap.src",
"product_id": "molecule-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product_id": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pytest-ansible@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el9ap.src",
"product": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src",
"product_id": "ansible-lint-0:26.6.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.8.3-1.el9ap.src",
"product": {
"name": "automation-controller-cli-0:4.8.3-1.el9ap.src",
"product_id": "automation-controller-cli-0:4.8.3-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.8.3-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.src",
"product_id": "receptor-0:1.6.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product_id": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-builder-0:3.1.1-3.1.el10ap.src",
"product": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.src",
"product_id": "ansible-builder-0:3.1.1-3.1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-builder@3.1.1-3.1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-2.el10ap.src",
"product": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.src",
"product_id": "ansible-navigator-0:26.6.0-2.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-2.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-2.el10ap.src",
"product": {
"name": "ansible-creator-0:26.6.1-2.el10ap.src",
"product_id": "ansible-creator-0:26.6.1-2.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-2.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-2:2.16.19-1.el10ap.src",
"product": {
"name": "ansible-core-2:2.16.19-1.el10ap.src",
"product_id": "ansible-core-2:2.16.19-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el10ap?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el10ap.src",
"product": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src",
"product_id": "ansible-sign-0:0.1.6-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product_id": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tox-ansible@26.6.1-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product_id": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el10ap.src",
"product": {
"name": "molecule-0:26.6.0-1.el10ap.src",
"product_id": "molecule-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product_id": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pytest-ansible@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el10ap.src",
"product": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src",
"product_id": "ansible-lint-0:26.6.0-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.8.3-1.el10ap.src",
"product": {
"name": "automation-controller-cli-0:4.8.3-1.el10ap.src",
"product_id": "automation-controller-cli-0:4.8.3-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.8.3-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.src",
"product_id": "receptor-0:1.6.6-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product_id": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el10ap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"product": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"product_id": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-builder@3.1.1-3.1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"product": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"product_id": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-2.el9ap.noarch",
"product": {
"name": "ansible-creator-0:26.6.1-2.el9ap.noarch",
"product_id": "ansible-creator-0:26.6.1-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product_id": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product_id": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-tox-ansible@26.6.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product_id": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "molecule-0:26.6.0-1.el9ap.noarch",
"product_id": "molecule-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product_id": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pytest-ansible@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product_id": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.8.3-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product_id": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools%2Bserver@26.7.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product_id": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"product": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"product_id": "ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-builder@3.1.1-3.1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-navigator-0:26.6.0-2.el10ap.noarch",
"product": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.noarch",
"product_id": "ansible-navigator-0:26.6.0-2.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-navigator@26.6.0-2.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-creator-0:26.6.1-2.el10ap.noarch",
"product": {
"name": "ansible-creator-0:26.6.1-2.el10ap.noarch",
"product_id": "ansible-creator-0:26.6.1-2.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-creator@26.6.1-2.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product_id": "ansible-core-2:2.16.19-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el10ap?arch=noarch\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product_id": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-sign@0.1.6-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product_id": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tox-ansible@26.6.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product_id": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-environment@26.6.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "molecule-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "molecule-0:26.6.0-1.el10ap.noarch",
"product_id": "molecule-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/molecule@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product_id": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pytest-ansible@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product_id": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-lint@26.6.0-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"product_id": "automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.8.3-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product_id": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools%2Bserver@26.7.1-1.el10ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product_id": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-dev-tools@26.7.1-1.el10ap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el10ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-2.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-2.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src"
},
"product_reference": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src"
},
"product_reference": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-2:2.16.19-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src"
},
"product_reference": "ansible-core-2:2.16.19-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-2.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-2.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.8.3-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.8.3-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src"
},
"product_reference": "automation-controller-cli-0:4.8.3-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pytest-ansible-0:26.6.0-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src"
},
"product_reference": "python-pytest-ansible-0:26.6.0-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tox-ansible-0:26.6.1-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src"
},
"product_reference": "python-tox-ansible-0:26.6.1-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch"
},
"product_reference": "python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch"
},
"product_reference": "python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Developer-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-builder-0:3.1.1-3.1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src"
},
"product_reference": "ansible-builder-0:3.1.1-3.1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch"
},
"product_reference": "ansible-creator-0:26.6.1-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-creator-0:26.6.1-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src"
},
"product_reference": "ansible-creator-0:26.6.1-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-environment-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src"
},
"product_reference": "ansible-dev-environment-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-dev-tools-0:26.7.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src"
},
"product_reference": "ansible-dev-tools-0:26.7.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-lint-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src"
},
"product_reference": "ansible-lint-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-navigator-0:26.6.0-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src"
},
"product_reference": "ansible-navigator-0:26.6.0-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-sign-0:0.1.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src"
},
"product_reference": "ansible-sign-0:0.1.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.8.3-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.8.3-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src"
},
"product_reference": "automation-controller-cli-0:4.8.3-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "molecule-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src"
},
"product_reference": "molecule-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src"
},
"product_reference": "python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src"
},
"product_reference": "python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:01:12+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:01:12+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:01:12+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:01:12+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-core-2:2.16.19-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-pytest-ansible-0:26.6.0-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python-tox-ansible-0:26.6.1-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:python3-pytest-ansible-0:26.6.0-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:python3-tox-ansible-0:26.6.1-1.el10ap.noarch",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.src",
"10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Developer-1.4:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-builder-0:3.1.1-3.1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-creator-0:26.6.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-environment-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools+server-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-dev-tools-0:26.7.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-lint-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-navigator-0:26.6.0-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:ansible-sign-0:0.1.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:automation-controller-cli-0:4.8.3-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:molecule-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-pytest-ansible-0:26.6.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.7:python3.12-tox-ansible-0:26.6.1-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…