Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-27145 (GCVE-0-2026-27145)
Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-03 12:04
VLAI
EPSS
VEX
Title
Inefficient candidate hostname parsing in crypto/x509
Summary
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
Severity
6.5 (Medium)
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-04 12:34 UTC
Assigner
References
97 references
Impacted products
226 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
0 , < 1.25.11
(semver)
Affected: 1.26.0-0 , < 1.26.4 (semver) |
guessed | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.7-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.7-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.4-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:0.3.8-6.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.0-4.el10_2.5 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.1-2.el10_2.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.5-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:0.3.2-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.4.0-8.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260710105056.a3795dee , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-9.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.26.4-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.22.2-7.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:0.2.7-8.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:0.2.2-1.el9_2.4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:0.2.4-9.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.26.5-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:0.2.7-1.el9_6.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:0.23.0-5.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.2 |
Unaffected:
1787593946 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | external secrets operator for Red Hat OpenShift 1.1 |
Unaffected:
1786614676 , < *
(rpm)
cpe:/a:redhat:external_secrets_operator:1.1::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1786549223 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1787201612 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1786764622 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1787176886 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787238383 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239116 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239595 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786577950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786750700 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786983362 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786664288 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259112 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787264185 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259740 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787260821 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784737366 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784738758 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784677239 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259015 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259059 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259011 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259016 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787258993 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259044 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259047 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259108 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259099 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259126 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259114 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259113 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787195995 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787201646 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1786764601 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787176716 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | Multicluster Global Hub 1.8.1 |
Unaffected:
1785763319 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.8::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260689 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787262214 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260663 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787263584 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784677172 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784638644 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784590741 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259106 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259284 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259310 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787263693 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787183407 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1786976940 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787172840 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787170830 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547792 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547807 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786549537 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787252179 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242135 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242105 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242321 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787243221 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242131 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242099 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242108 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783917963 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1784004914 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1786754425 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704636 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885742 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885559 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784908682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784917979 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885281 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885133 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784953556 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784918113 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921753 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921772 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784953743 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784918117 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885810 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885681 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784908639 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1785316150 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131046 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131063 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131291 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785317214 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1786654871 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8
|
||
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift API for Data Protection |
cpe:/a:redhat:openshift_api_data_protection:1
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 7 |
cpe:/a:redhat:ceph_storage:7
|
||
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | streams for Apache Kafka 2 |
cpe:/a:redhat:amq_streams:2
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-27145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-04T12:34:03.859208Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T12:34:53.136Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.8-6.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.0-4.el10_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.1-2.el10_2.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.2-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.4.0-8.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260710105056.a3795dee",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-9.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.22.2-7.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-8.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.2-1.el9_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.4-9.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-1.el9_6.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.23.0-5.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/perses-rhel9",
"product": "Cluster Observability Operator 1.5.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787593946",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "external secrets operator for Red Hat OpenShift 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786614676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549223",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201612",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764622",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176886",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787238383",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786577950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786750700",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786983362",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786664288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259112",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787264185",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259740",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260821",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784737366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784738758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259059",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259011",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259016",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787258993",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259044",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259047",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259126",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787195995",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201646",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764601",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176716",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785763319",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260689",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787262214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260663",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263584",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677172",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multiclusterhub-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784638644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784590741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259310",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263693",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787183407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786976940",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787172840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787170830",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787252179",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242105",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242321",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787243221",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242131",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783917963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784004914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786754425",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704636",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784917979",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885281",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953556",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953743",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918117",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885810",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885681",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785316150",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131063",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131291",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785317214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786654871",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "unaffected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "unaffected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/logic-rhel9-operator",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/runc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cli",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-crio-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "unaffected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2"
],
"defaultStatus": "affected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-02T22:01:36.954Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-606",
"description": "Unchecked Input for Loop Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-03T12:04:42.684Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"name": "RHBZ#2484207",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53416"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46394"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29980"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39005"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60354"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60315"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36317"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60390"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54427"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60386"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60025"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57488"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49705"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49744"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:55899"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54525"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59557"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54432"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59593"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59579"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59558"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59559"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:61314: Cluster Observability Operator 1.5.2"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:52946: Multicluster Global Hub 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-02T23:01:08.992Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-02T22:01:36.954Z",
"value": "Made public."
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"workarounds": [
{
"lang": "en",
"value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "HostnameError.Error"
},
{
"name": "matchHostnames"
},
{
"name": "Certificate.Verify"
},
{
"name": "Certificate.VerifyHostname"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.11",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.4",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Jakub Ciolek - https://ciolek.dev/"
}
],
"descriptions": [
{
"lang": "en",
"value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-407: Inefficient Algorithmic Complexity",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T22:01:36.954Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/783621"
},
{
"url": "https://go.dev/issue/79694"
},
{
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"title": "Inefficient candidate hostname parsing in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-27145",
"datePublished": "2026-06-02T22:01:36.954Z",
"dateReserved": "2026-02-17T19:57:28.435Z",
"dateUpdated": "2026-09-03T12:04:42.684Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-27145",
"date": "2026-09-03",
"epss": "0.00591",
"percentile": "0.46003"
},
"microsoft_vex": {
"current_release_date": "2026-09-03T01:03:20.000Z",
"cve": "CVE-2026-27145",
"id": "msrc_CVE-2026-27145",
"initial_release_date": "2026-06-06T01:01:30.000Z",
"product_status:known_affected": "4",
"product_status:known_not_affected": "3",
"product_status:under_investigation": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Inefficient candidate hostname parsing in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27145.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-27145\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-06-02T23:16:35.570\",\"lastModified\":\"2026-09-03T13:04:58.747\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"},{\"lang\":\"es\",\"value\":\"(x509.Certificate).VerifyHostname previamente llamaba a matchHostnames en un bucle sobre todas las entradas de Nombres Alternativos del Sujeto (SAN) de DNS. Esto provoc\u00f3 que strings.Split(host, \\\".\\\") se ejecutara repetidamente en el mismo nombre de host de entrada. Con una lista SAN de DNS grande, los costos de verificaci\u00f3n escalaron cuadr\u00e1ticamente en funci\u00f3n del n\u00famero de entradas SAN multiplicado por el recuento de etiquetas del nombre de host. Debido a que x509.Verify valida los nombres de host antes de construir la cadena de certificados, esta sobrecarga ocurr\u00eda incluso para certificados no confiables.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"HostnameError.Error\"},{\"name\":\"matchHostnames\"},{\"name\":\"Certificate.Verify\"},{\"name\":\"Certificate.VerifyHostname\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.7-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.7-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.4-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:0.3.8-6.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.0-4.el10_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.1-2.el10_2.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:0.3.2-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.4.0-8.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260710105056.a3795dee\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-9.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.26.4-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.22.2-7.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:0.2.7-8.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:0.2.2-1.el9_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:0.2.4-9.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:0.2.7-1.el9_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:0.23.0-5.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/perses-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1787593946\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"external secrets operator for Red Hat OpenShift 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"],\"versions\":[{\"version\":\"1786614676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786549223\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787201612\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786764622\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787176886\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787238383\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786577950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786750700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786983362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786664288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259112\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787264185\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259740\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787260821\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784737366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784738758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784677239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259059\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259011\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259016\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787258993\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259044\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259047\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259126\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787195995\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787201646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1786764601\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787176716\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"],\"versions\":[{\"version\":\"1785763319\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787262214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260663\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787263584\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784677172\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multiclusterhub-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784638644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784590741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259310\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787263693\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787183407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1786976940\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787172840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787170830\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786549537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787252179\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242105\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242321\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787243221\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783917963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1784004914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1786754425\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704636\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784908682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784917979\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885281\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784953556\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784918113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784953743\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784918117\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885810\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885681\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784908639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1785316150\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131063\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785317214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1786654871\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/logic-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-volsync-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-crio-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-redfish-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":4.2},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-04T12:34:03.859208Z\",\"id\":\"CVE-2026-27145\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-606\"}]}],\"references\":[{\"url\":\"https://go.dev/cl/783621\",\"source\":\"security@golang.org\"},{\"url\":\"https://go.dev/issue/79694\",\"source\":\"security@golang.org\"},{\"url\":\"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\",\"source\":\"security@golang.org\"},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5037\",\"source\":\"security@golang.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29980\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36317\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39005\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41930\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42080\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46394\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47737\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49705\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49744\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49765\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49770\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53416\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54401\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54427\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54432\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54525\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:55899\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57488\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57649\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59557\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59558\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59559\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59579\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59593\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60025\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60315\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60354\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60386\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60390\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61253\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61314\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:63016\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-27145\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-09-03T08:41:16+00:00",
"cve": "CVE-2026-27145",
"id": "CVE-2026-27145",
"initial_release_date": "2026-06-02T22:01:36.954000+00:00",
"product_status:fixed": "973",
"product_status:known_affected": "67",
"product_status:known_not_affected": "4465",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-01T00:55:34Z",
"cve": "CVE-2026-27145",
"id": "CVE-2026-27145",
"initial_release_date": "2026-06-04T02:27:28Z",
"product_status:known_affected": "73",
"product_status:known_not_affected": "76",
"product_status:recommended": "262",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-27145",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-27145.json",
"version": "22"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.8-6.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.0-4.el10_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.1-2.el10_2.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.2-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.4.0-8.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260710105056.a3795dee\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-toolset:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.22.2-7.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-8.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.2-1.el9_2.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.4-9.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-1.el9_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.23.0-5.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"butane\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787593946\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/perses-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"external secrets operator for Red Hat OpenShift 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786614676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549223\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201612\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764622\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176886\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787238383\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786577950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786750700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786983362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786664288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259112\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787264185\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259740\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260821\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784737366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784738758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259011\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259016\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787258993\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259044\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259047\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259126\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787195995\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764601\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176716\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785763319\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787262214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260663\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263584\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677172\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784638644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multiclusterhub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784590741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259310\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787183407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786976940\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787172840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787170830\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787252179\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242105\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242321\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787243221\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783917963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784004914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786754425\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704636\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784917979\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885281\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953556\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921772\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953743\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918117\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885810\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885681\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785316150\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131063\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785317214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786654871\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection\", \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/logic-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-volsync-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-crio-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-redfish-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 2\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-02T23:01:08.992Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-02T22:01:36.954Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61314: Cluster Observability Operator 1.5.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52946: Multicluster Global Hub 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:55899: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59557: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54432: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59556: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59593: multicluster engine for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59579: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59558: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59559: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-02T22:01:36.954Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-27145\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\", \"name\": \"RHBZ#2484207\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53416\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57482\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46394\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29980\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39005\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41930\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60354\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57649\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60315\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54401\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36317\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61314\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60390\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54427\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60386\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:63016\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60025\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57488\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49705\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49729\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49744\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49765\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49770\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:55899\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59557\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54432\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59593\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59579\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59558\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59559\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \\\".\\\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\\n\\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\\n\\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-606\", \"description\": \"Unchecked Input for Loop Condition\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-09-03T12:04:42.684Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27145\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-04T12:34:03.859208Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-04T12:34:49.559Z\"}}], \"cna\": {\"title\": \"Inefficient candidate hostname parsing in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Jakub Ciolek - https://ciolek.dev/\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.4\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"HostnameError.Error\"}, {\"name\": \"matchHostnames\"}, {\"name\": \"Certificate.Verify\"}, {\"name\": \"Certificate.VerifyHostname\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/783621\"}, {\"url\": \"https://go.dev/issue/79694\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5037\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-407: Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-06-02T22:01:36.954Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-27145\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-03T12:04:42.684Z\", \"dateReserved\": \"2026-02-17T19:57:28.435Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-06-02T22:01:36.954Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:49765
Vulnerability from csaf_redhat - Published: 2026-08-03 18:05 - Updated: 2026-09-03 09:00Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.6
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.3.6
This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.3.6, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Security Fix(es):
* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)
* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)
* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)
* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)
* CVE-2026-48743 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation (OSSM-14882)
* CVE-2026-47204 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via Connect protocol request (OSSM-14883)
* CVE-2026-47221 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Null pointer deref in internal redirects (OSSM-14884)
* CVE-2026-48042 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via deeply nested JSON objects (OSSM-14885)
* CVE-2026-48044 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via specially crafted zstd payload (OSSM-14886)
* CVE-2026-48706 openshift-service-mesh/istio-proxyv2-rhel9: Envoy Heap Buffer Overflow in TcpStatsdSink (OSSM-14887)
Fixes/Improvements:
* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Envoy, an open source edge and service proxy. A remote attacker can exploit this vulnerability by sending a specially crafted Connect protocol request to a direct response route. This action causes the `envoy.filters.http.grpc_stats` filter to crash, leading to a denial of service (DoS) for the Envoy process. This can disrupt services relying on the proxy.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Envoy. An unauthenticated attacker can exploit a null pointer dereference vulnerability in the router filter. This occurs when handling HTTP 303 (See Other) internal redirects for body-less non-GET/HEAD requests. By sending a POST, PUT, DELETE, or PATCH request without a body to a specially configured route, and if the upstream responds with HTTP 303, the Envoy process will crash. This leads to a complete denial of service, terminating all active connections.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Envoy, an open-source edge and service proxy. A remote attacker could exploit this vulnerability by sending deeply nested JSON objects to the affected system. This could lead to a stack overflow during the destruction of JSON objects, resulting in a Denial of Service (DoS) for the Envoy proxy.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Envoy, an open source edge and service proxy. A remote attacker can exploit this vulnerability by sending a specially crafted, highly compressed zstd payload to an Envoy proxy with zstd decompression enabled. This can lead to massive memory allocation, causing severe memory exhaustion and potentially resulting in an Out-Of-Memory (OOM) kill and Denial of Service (DoS) for the Envoy proxy.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Envoy, an open-source edge and service proxy. An attacker can exploit a heap write overflow vulnerability in Envoy's TCP StatsD sink by sending exceptionally long statistic names, such as those found in HTTP or gRPC request paths. This can lead to a denial-of-service, causing the process to crash, and potentially enable remote code execution.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Envoy, an open source edge and service proxy. This vulnerability occurs when Envoy translates an HTTP/3 request that is complete at the transport layer but still carries a nonzero Content-Length into an HTTP/1 request for an upstream server. If the upstream server responds before fully reading the declared body, a subsequent Envoy-generated request can be misinterpreted as part of the previous one. This can lead to a request desynchronization, allowing an attacker to bypass security policies and access unauthorized resources.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 | — |
Workaround
|
Threats
Impact
Important
References
49 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh 3.3.6\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh 3.3.6, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nSecurity Fix(es):\n\n* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)\n* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)\n* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)\n* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14633)\n* CVE-2026-48743 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation (OSSM-14882)\n* CVE-2026-47204 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via Connect protocol request (OSSM-14883)\n* CVE-2026-47221 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Null pointer deref in internal redirects (OSSM-14884)\n* CVE-2026-48042 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via deeply nested JSON objects (OSSM-14885)\n* CVE-2026-48044 openshift-service-mesh/istio-proxyv2-rhel9: Envoy: Denial of Service via specially crafted zstd payload (OSSM-14886)\n* CVE-2026-48706 openshift-service-mesh/istio-proxyv2-rhel9: Envoy Heap Buffer Overflow in TcpStatsdSink (OSSM-14887)\n\nFixes/Improvements:\n\n* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49765",
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47204",
"url": "https://access.redhat.com/security/cve/CVE-2026-47204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47221",
"url": "https://access.redhat.com/security/cve/CVE-2026-47221"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48042",
"url": "https://access.redhat.com/security/cve/CVE-2026-48042"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48044",
"url": "https://access.redhat.com/security/cve/CVE-2026-48044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48706",
"url": "https://access.redhat.com/security/cve/CVE-2026-48706"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48743",
"url": "https://access.redhat.com/security/cve/CVE-2026-48743"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49765.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.6",
"tracking": {
"current_release_date": "2026-09-03T09:00:31+00:00",
"generator": {
"date": "2026-09-03T09:00:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49765",
"initial_release_date": "2026-08-03T18:05:21+00:00",
"revision_history": [
{
"date": "2026-08-03T18:05:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T09:00:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3Aed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle\u0026tag=1785322241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1784885810"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784885505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785316150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Aced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1784885681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1784908639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784886337"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1784885810"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784885505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3Ab3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785316150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Afe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1784885681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1784908639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784886337"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1784885810"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Ad4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784885505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785316150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1784885681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1784908639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784886337"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1784885810"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784885505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785316150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1784885681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1784908639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784886337"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-47204",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-06-29T14:01:42.073320+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494195"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy, an open source edge and service proxy. A remote attacker can exploit this vulnerability by sending a specially crafted Connect protocol request to a direct response route. This action causes the `envoy.filters.http.grpc_stats` filter to crash, leading to a denial of service (DoS) for the Envoy process. This can disrupt services relying on the proxy.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "envoy: Envoy: Denial of Service via Connect protocol request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate-impact denial of service flaw in Envoy allows a remote, unauthenticated attacker to crash the Envoy proxy process by sending a specially crafted Connect protocol request to a direct response route. This vulnerability affects Red Hat OpenShift Service Mesh and cloud.redhat.com services that utilize Envoy, potentially disrupting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47204"
},
{
"category": "external",
"summary": "RHBZ#2494195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47204"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6"
}
],
"release_date": "2026-06-26T17:37:17.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "envoy: Envoy: Denial of Service via Connect protocol request"
},
{
"cve": "CVE-2026-47221",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-06-26T19:00:56.667030+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493646"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy. An unauthenticated attacker can exploit a null pointer dereference vulnerability in the router filter. This occurs when handling HTTP 303 (See Other) internal redirects for body-less non-GET/HEAD requests. By sending a POST, PUT, DELETE, or PATCH request without a body to a specially configured route, and if the upstream responds with HTTP 303, the Envoy process will crash. This leads to a complete denial of service, terminating all active connections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "envoy: Envoy: Null pointer deref in internal redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: An unauthenticated attacker can trigger a denial of service in Envoy. This is due to a null pointer dereference when handling HTTP 303 internal redirects for body-less non-GET/HEAD requests, leading to a crash of the Envoy process. This vulnerability affects Envoy deployments configured with an internal redirect policy that includes HTTP 303 in `redirect_response_codes`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47221"
},
{
"category": "external",
"summary": "RHBZ#2493646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493646"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47221"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr"
}
],
"release_date": "2026-06-26T17:35:29.518000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "envoy: Envoy: Null pointer deref in internal redirects"
},
{
"cve": "CVE-2026-48042",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-06-29T14:01:50.582171+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494196"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy, an open-source edge and service proxy. A remote attacker could exploit this vulnerability by sending deeply nested JSON objects to the affected system. This could lead to a stack overflow during the destruction of JSON objects, resulting in a Denial of Service (DoS) for the Envoy proxy.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "envoy: Envoy: Denial of Service via deeply nested JSON objects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Envoy, an open-source edge and service proxy. A remote attacker can trigger a stack overflow by sending deeply nested JSON objects, leading to service unavailability. This vulnerability affects systems where Envoy is deployed and exposed to untrusted input, potentially disrupting critical proxy functionalities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48042"
},
{
"category": "external",
"summary": "RHBZ#2494196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48042"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48042",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48042"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/blob/099a9d71ebfd8aa9f823e1738b34138cb634a07b/source/common/json/json_loader.h#L21",
"url": "https://github.com/envoyproxy/envoy/blob/099a9d71ebfd8aa9f823e1738b34138cb634a07b/source/common/json/json_loader.h#L21"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv"
}
],
"release_date": "2026-06-26T17:29:14.964000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "envoy: Envoy: Denial of Service via deeply nested JSON objects"
},
{
"cve": "CVE-2026-48044",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-26T19:01:14.020511+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy, an open source edge and service proxy. A remote attacker can exploit this vulnerability by sending a specially crafted, highly compressed zstd payload to an Envoy proxy with zstd decompression enabled. This can lead to massive memory allocation, causing severe memory exhaustion and potentially resulting in an Out-Of-Memory (OOM) kill and Denial of Service (DoS) for the Envoy proxy.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Envoy: Envoy: Denial of Service via specially crafted zstd payload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Envoy\u0027s zstd decompressor is rated as Important, as a remote, unauthenticated attacker can induce a denial of service. By sending a specially crafted zstd payload, an attacker can cause excessive memory allocation, leading to an Out-Of-Memory condition and service disruption for Envoy proxy instances deployed in Red Hat environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48044"
},
{
"category": "external",
"summary": "RHBZ#2493649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48044"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg"
}
],
"release_date": "2026-06-26T17:31:37.602000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Envoy: Envoy: Denial of Service via specially crafted zstd payload"
},
{
"cve": "CVE-2026-48706",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-26T20:00:56.026254+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493676"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy, an open-source edge and service proxy. An attacker can exploit a heap write overflow vulnerability in Envoy\u0027s TCP StatsD sink by sending exceptionally long statistic names, such as those found in HTTP or gRPC request paths. This can lead to a denial-of-service, causing the process to crash, and potentially enable remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "envoy: Envoy Heap Buffer Overflow in TcpStatsdSink",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate-severity heap write overflow in Envoy\u0027s TCP StatsD sink can cause a denial of service in Red Hat OpenShift Service Mesh. Exploitation requires an attacker to send exceptionally long statistic names, typically via HTTP or gRPC request paths, making the attack complex and limiting its immediate impact to service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48706"
},
{
"category": "external",
"summary": "RHBZ#2493676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493676"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48706",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48706"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48706",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48706"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4"
}
],
"release_date": "2026-06-26T17:38:23.581000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "envoy: Envoy Heap Buffer Overflow in TcpStatsdSink"
},
{
"cve": "CVE-2026-48743",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-06-29T17:01:20.532330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494518"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Envoy, an open source edge and service proxy. This vulnerability occurs when Envoy translates an HTTP/3 request that is complete at the transport layer but still carries a nonzero Content-Length into an HTTP/1 request for an upstream server. If the upstream server responds before fully reading the declared body, a subsequent Envoy-generated request can be misinterpreted as part of the previous one. This can lead to a request desynchronization, allowing an attacker to bypass security policies and access unauthorized resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "envoy: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Envoy, affecting Red Hat OpenShift Service Mesh and cloud.redhat.com deployments. The vulnerability arises from improper handling of HTTP/3 to HTTP/1 request translation, where a complete HTTP/3 request with a non-zero Content-Length can lead to request desynchronization on the upstream HTTP/1 server. This desynchronization allows an attacker to bypass security policies, potentially gaining unauthorized access to internal resources or services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48743"
},
{
"category": "external",
"summary": "RHBZ#2494518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494518"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48743",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48743"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48743",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48743"
},
{
"category": "external",
"summary": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf",
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf"
}
],
"release_date": "2026-06-26T17:34:22.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:05:21+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.3.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:00d38604ec92065c2da6de5100eded9a3bd94429ef333ab30bffe9f4b88fa81a_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:30ec9e046bea82559e14663d660f5b0f2c3efa9919d7afe5b28710dd6e45d07b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:68ddaeddb2e22ed94e0de9a0dc07fcae90265047280376bba562b39dccfd54ae_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:88e85b5bfe701c95ae5b52086c5916fec69f2df6a19148e1d1e818893453b4ca_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4c3beafc255025f29b04c6e79f17944be5c697aa104bff48cd9b10c1510ecdd4_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:73d9ab206c3ede1747f17736d75df8cf90badfc92026e0c1d0014b9adb0ff8fd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7497ff1f09797032487b442cb1b96b154a1bd2267cd97443eca08cc5db209524_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d4897d5dbd9bcf39e0777462c71fa8cceb47cb1131102901e94356fa60647186_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5942a3782d861044c6ba7afc822b59a8fd25dd93c93cb6b8d615c5a2d3b2a7c4_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:75c04065e4a708a4ba4ccecca06bd7ba703405922181d466801c94a351d37ecf_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ced221968e9eb8e9f9f7f073da99db9032c2677ee5c4342baf800d738befbee5_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe14d77cd8257197c8bb14ae4f3e85a3ba06e53b68627293be9686087dc129e9_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:09292f6545b2e6619bbbd267024fa4f9c6c8b760e53cfc2833eb54d9f453453e_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:2822039fd4beacdce9ba55663107db291846050ffae0a59c4a8059b81a2a99bd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4938aa51aff7c6cd248fa954e00bc414221f4236001fc4b032305b33ce3cfa12_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9eba1d3fbc947bb0fe267818fc7a5e06bf403004a045e80c65b2592a7bd06da4_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:1a81558c67a5e3a62842ccf1ac5d686d9f83c448e693fe2ac83d46ec60c0f57d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:821f4acfea78e5207952841ab3c153cb42d8e5a0e9c5f79b6ac947e919523c44_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:9b27c3c0ae1c827768f29ef1b5c411a8f725a04af6ad834c7e24a49835f2f13f_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b3cac830d31372ec560fec29eddb344861b9cfd08bccb46a35b443e0997f8b6a_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ed441b7161d15b4f1b1e5fba0b7e7c10fced1de39ff17b18cf4ffa552235e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:26d46e7ca66a08614de1e43b1b6a32ab6f56dd02408a93be317956db354df023_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:5722dd927b0b6f6ad167ffc995514aea1bd029f7b036cc3437041e53b49f103d_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6aa03c09ea788efeacaf5e189aa0ad98d7fbe9f072f2a5c3cb5b109c18b1d6fe_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:723c1bb7a91e040f29bc78817b140adb6e6bb4863f0bf7c529e27c9bfda118d4_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "envoy: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation"
}
]
}
RHSA-2026:49767
Vulnerability from csaf_redhat - Published: 2026-08-03 18:13 - Updated: 2026-09-03 15:33Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49767",
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49767.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-09-03T15:33:06+00:00",
"generator": {
"date": "2026-09-03T15:33:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49767",
"initial_release_date": "2026-08-03T18:13:05+00:00",
"revision_history": [
{
"date": "2026-08-03T18:13:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:33:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Ae75dc3d7df27fa5532642887c6a2989a5997507da4ff6677cc09b32b7d4f0cd0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3Ad6cc0d62c9f820ee8856ef2cf766cb981c0a898c1bc2e5da541298b92fe9f48d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A4dc2de8a2c12c9499f0101148b7864680b4c74bdf4fb44c02d2a7966e63b978d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A6b8a2b930fbd3695d0555585c412594b30b2506d9f9acfb6b6339c742a91a6ba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A42582688ba3a4c6d1eebba9ffbc385f2f606ec376bac977395c6c31e9d27f575\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Aca3361e621846d985e2b04e77138097cd679402c88ad5ee7aa281cc33e89a7fe\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3Aac86c9f4eadfea26a37e04b62cd79b1fb4a51eccfaac17f2e1f8fefa1d3609e8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Adf7bf266fd09164656e6e0b16935f1028dcd930d02868df452f76f073a766128\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3Ac89bf59960c1cdc08f91266782e8261c9ec14f2e9a6a54ba2702febb6f3edcf8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3Adfed759f50eaf9ca63716d1517ec14ab32fe83f908a49432bee34b2b7fa12f74\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Ab5c0783747fb834466f4e9f0e92ebd3dff94181d2b917f030ebd0b6c28f29c46\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A2f2a611fcdb377b951461c5d9bdd588cba5d2b276f7f0def5ff10c51ff7c6211\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A96e5b122199bfc8972d090d3b62b6a1d3b739b3b2e7cb5afb00ffaff07484bbd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A51c236fb7321309645f0363e712a7e208746167b52634d4591ca7afc3ebe35f4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3A849c17c815b098e234b5d2e7de8a594d74aeceef9b275b7290a6c39cc87606da\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3A40448bcf19dd95ac19281503edad38837ee754210b0910ffa33ce01616bc483d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3Afdec9fafb327bd19e37a327ff8afdf81113839105a891ae43a4115387f448d80\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ab41a91d8aaafd27f321e5c6afaa2f80a1a192b65490ed83d06fd9d1a13cd2259\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ad11f6fdf2936505d92011565b3191fede6e0c42361f3374f407104b0183d9650\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ae8f93b6f40448046ea096ccbe68d3770108ee5ee35fbec23bb9f6aa00bf961f0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A4a1f79d40b04cb87ba8278793ab6cadf8139d4f013911501ac2b61c1342f8bf4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3Af0274ee12240fd7d6eddda2b85edfe71debf640f881f8f87864e07607226b281\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3Ad84c73bc689218700d9134a408e24dc01a28b1366920ebbd7b74837729c4be49\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A9ec55cf4fdae8edd492ca4eb70540edf6cff7a9d66abd537e4b16e197d35c2c4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3A4e8e133040df495b1dfb5c777c7e00e839829594c4e3b5238103d6cede6732bf\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aad344e63797afc8efb929973badbdd975c84bacb07043882e87966fafc5dde31\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af41c6465b0729d50b466881c215e7c033ca8d325001b1a572c8259542e21a751\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A3a0f8b948f7307efd546408f0b2ca5de177d53ddbe124edc78ffd3f8d81571ed\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ad0ef9416f3dab3fc977311aa9ee56c6eda926b09a5e26310dc0fd633c0fbcc62\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A1a38cf42d9815165e7ba168a2ccd08d4183f30690d60779ff0365d348c9b6c73\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aeb9a30596e16a751e664789d3cf9cec89bbbaade890df56c46e6f18562cece21\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A130934550be2ea638bcf42f0f7b987b373b31b6a1a43a73b506c7a13a76d2d48\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A98f8bcf03a7241fb6e97fc71c10d36600066791a07423876ede59c950eb61f1b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A41c21c8e9f7bb881853fb9ce09136526010d0d4abf2f76549c76ca6f40740fba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aad7261c944910196f7aab08e1a24dc77996d107a339d74da1d4196fd96a421e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3A96991d095eb2dd8472471d377522f9e6ef36153292bd381b022b554de4539b19\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3Aaea309944ca64070e736e4695e9624ee4405cd5dd6c5b5c3dd85e15ff8c03554\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Ace65e11339269a1e1749aadef3add5b9d3b7487f3db8f358b4c0d2aba98e2d7a\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A9fe9680fe67969fedfceb3993930056de422ff1836886145db8512ea18110368\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Aec9f094da7b0307fdc2d8440ca421caaaff22ab337c796fadeb7009313b6c564\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A2655b8c2c57d107325710857fb7ca22c439b5466abd8adf60792b9821da9efc4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A0d8eadf8b8aee4e8e4eee350ef54c21ca921f9d3678157c8710d3ea3fb5d2215\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3A029eadc83ace4ec12004539731d3b11817a0939c929bfa1895dad45bf4233899\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3Ab1e762e1277bf10d0ea1cd06268d521f827b41adff7898d3f2e90ef1f92b9459\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A38f4682466f7f1f9b6f0d0fa8b3faa635c94a604a0cb503280a139ee472fe0e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A71479daf6769fff4772c5e17684f7f86b91b7eeaffba0144df6f8fe78b4d0306\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3A6fef4f4b207582acdc89736dba2155dabed565b8946be14211a4b64e744cb72b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3A54414f4e41a7b7324464df9ba51a5c5c7a36bdf2a10243e18a18c0a07a4c7250\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3A99b32d68816507be2304422886bd7991c0f0796ff5e80f3cb2e5df573dfd3fdd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3A1426e9dba9f83dc9f9e7e74a8930d223cbc9179860aeb5dcc988f5f1b06eec70\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:49770
Vulnerability from csaf_redhat - Published: 2026-08-03 18:29 - Updated: 2026-09-03 09:00Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.1
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.4.1
This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.4.1, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Security Fix(es):
* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
Fixes/Improvements:
* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh 3.4.1\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh 3.4.1, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nSecurity Fix(es):\n\n* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n\nFixes/Improvements:\n\n* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49770",
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49770.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.1",
"tracking": {
"current_release_date": "2026-09-03T09:00:32+00:00",
"generator": {
"date": "2026-09-03T09:00:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49770",
"initial_release_date": "2026-08-03T18:29:49+00:00",
"revision_history": [
{
"date": "2026-08-03T18:29:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T09:00:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.4",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3Ad962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle\u0026tag=1785320531"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Aff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Ac6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ad3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Acc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3Aeb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Adcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Aebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Acaf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Adae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3Aa3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Ac93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:29:49+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.4.1 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.4",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
}
]
}
RHSA-2026:50205
Vulnerability from csaf_redhat - Published: 2026-08-04 15:29 - Updated: 2026-09-03 14:23Summary
Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.1 release
Severity
Important
Notes
Topic: Red Hat build of OpenTelemetry 3.10.1 has been released
Details: This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* None
Known issues:
* None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
4.4 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.
5.0 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.
5.0 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Workaround
|
Threats
Impact
Important
A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.
6.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x | — |
Threats
Impact
Moderate
References
101 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat build of OpenTelemetry 3.10.1 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* None\n\n\nKnown issues:\n\n* None",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50205",
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39823",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42507",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54370",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5450",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50205.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.1 release",
"tracking": {
"current_release_date": "2026-09-03T14:23:23+00:00",
"generator": {
"date": "2026-09-03T14:23:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50205",
"initial_release_date": "2026-08-04T15:29:30+00:00",
"revision_history": [
{
"date": "2026-08-04T15:29:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:23:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-operator-bundle@sha256%3A356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-operator-bundle\u0026tag=1785744179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3Aa14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-collector-rhel9\u0026tag=1785704636"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-rhel9-operator\u0026tag=1785704547"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Aa67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9\u0026tag=1785704551"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mohamed Maatallah"
]
}
],
"cve": "CVE-2025-5278",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-05-27T13:50:20.148000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2368764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "RHBZ#2368764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
},
{
"category": "external",
"summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
}
],
"release_date": "2025-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
},
{
"cve": "CVE-2026-5435",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-04-28T14:01:44.684432+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463465"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "RHBZ#2463465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
}
],
"release_date": "2026-04-28T11:58:54.962000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
},
{
"cve": "CVE-2026-5450",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-20T21:01:35.403778+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "RHBZ#2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
}
],
"release_date": "2026-04-20T20:55:41.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
},
{
"cve": "CVE-2026-5928",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-04-20T21:01:38.811304+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459854"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "RHBZ#2459854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
}
],
"release_date": "2026-04-20T20:37:31.743000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54369",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-16T23:47:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490277"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: Symlink traversal privilege escalation via libacl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important because a local attacker who controls any component of a pathname processed by a privileged process using libacl can redirect ACL operations to arbitrary files. Exploitation requires local access with the ability to create symlinks in a directory that a privileged program later processes with acl_get_file() or acl_set_file(). In default RHEL and OpenShift CoreOS configurations, standard file permission settings limit where unprivileged users can create symlinks, reducing the practical attack surface. Programs that operate on user-supplied paths with elevated privileges are most at risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "RHBZ#2490277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "workaround",
"details": "Restrict unprivileged users from creating symlinks in directories that privileged processes operate on with ACL commands. Where possible, use the fs.protected_symlinks sysctl (enabled by default on RHEL 7+), which prevents symlink following in world-writable sticky directories unless the owner of the symlink matches the owner of the target file or directory.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "acl: Symlink traversal privilege escalation via libacl functions"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54370",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-16T19:47:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490279"
}
],
"notes": [
{
"category": "description",
"text": "A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: TOCTOU Symlink Traversal via getfacl/setfacl",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "RHBZ#2490279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T15:29:30+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:2cdd8292273cb748f58949b053a5d2f104d30bcf91f28ec62a0d3b6e864e6c11_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "acl: TOCTOU Symlink Traversal via getfacl/setfacl"
}
]
}
RHSA-2026:50319
Vulnerability from csaf_redhat - Published: 2026-08-04 18:10 - Updated: 2026-09-03 17:12Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: An update is now available for Red Hat Ansible Automation Platform 2.5
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* automation-controller: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)
* automation-eda-controller: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN (CVE-2026-12383)
* automation-gateway-proxy: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* python3.12-aiohttp: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)
* python3.12-daphne: daphne: Denial of Service via excessive WebSocket message size (CVE-2026-44545)
* python3.12-pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
* python3.12-pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)
* python3.12-pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
* python3.12-pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
* python3.12-pillow: Native heap out-of-bounds write (CVE-2026-59197)
* python3.12-pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59885)
* python3.12-pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER (CVE-2026-59886)
* receptor: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)
* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny], authentication_classes=[]) and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a trusted proxy. Additionally, the expected certificate Distinguished Name is leaked in the 403 error response body. An attacker who can reach the EDA API endpoint with a spoofed Subject header can inject arbitrary events into mTLS-protected event streams, triggering downstream automation actions.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
178 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
176 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.
7.2 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service (DoS) condition where the affected server or client may crash or run out of resources.
7.5 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
176 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Vendor Fix
fix
|
Known not affected
186 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
182 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primary consequence is a Denial of Service (DoS), which could make the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation, and ImagingExpand() computes output dimensions with unchecked signed integer arithmetic. This can lead to denial of service and limited integrity impact via heap corruption.
8.2 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
180 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
186 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
186 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
References
105 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Ansible Automation Platform 2.5\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-controller: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)\n* automation-eda-controller: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN (CVE-2026-12383)\n* automation-gateway-proxy: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* python3.12-aiohttp: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)\n* python3.12-daphne: daphne: Denial of Service via excessive WebSocket message size (CVE-2026-44545)\n* python3.12-pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)\n* python3.12-pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)\n* python3.12-pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)\n* python3.12-pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)\n* python3.12-pillow: Native heap out-of-bounds write (CVE-2026-59197)\n* python3.12-pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59885)\n* python3.12-pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER (CVE-2026-59886)\n* receptor: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)\n* receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50319",
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2484377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484377"
},
{
"category": "external",
"summary": "2484875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484875"
},
{
"category": "external",
"summary": "2489127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489127"
},
{
"category": "external",
"summary": "2497452",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
},
{
"category": "external",
"summary": "2497455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
},
{
"category": "external",
"summary": "2497464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497464"
},
{
"category": "external",
"summary": "2497466",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
},
{
"category": "external",
"summary": "2500041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
},
{
"category": "external",
"summary": "2500043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500043"
},
{
"category": "external",
"summary": "2500380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50319.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-09-03T17:12:33+00:00",
"generator": {
"date": "2026-09-03T17:12:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50319",
"initial_release_date": "2026-08-04T18:10:56+00:00",
"revision_history": [
{
"date": "2026-08-04T18:10:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-04T18:10:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T17:12:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-daphne-0:4.2.2-1.el9ap.src",
"product": {
"name": "python3.12-daphne-0:4.2.2-1.el9ap.src",
"product_id": "python3.12-daphne-0:4.2.2-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-daphne@4.2.2-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el9ap.src",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.src",
"product_id": "python3.12-pillow-0:12.3.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"product_id": "python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.66-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"product_id": "automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.17-1.el9ap.src",
"product": {
"name": "automation-hub-0:4.10.17-1.el9ap.src",
"product_id": "automation-hub-0:4.10.17-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.17-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"product": {
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"product_id": "python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyasn1@0.6.4-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.21-1.el9ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.21-1.el9ap.src",
"product_id": "automation-eda-controller-0:1.1.21-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.21-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.17-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260804-1.el9ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260804-1.el9ap.src",
"product_id": "automation-gateway-0:2.5.20260804-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260804-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el9ap.src",
"product": {
"name": "receptor-0:1.6.7-1.el9ap.src",
"product_id": "receptor-0:1.6.7-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el9ap.src",
"product": {
"name": "automation-controller-0:4.6.31-1.el9ap.src",
"product_id": "automation-controller-0:4.6.31-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-daphne-0:4.2.2-1.el8ap.src",
"product": {
"name": "python3.12-daphne-0:4.2.2-1.el8ap.src",
"product_id": "python3.12-daphne-0:4.2.2-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-daphne@4.2.2-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el8ap.src",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.src",
"product_id": "python3.12-pillow-0:12.3.0-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"product_id": "python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.66-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"product": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"product_id": "automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.5.10-7.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.21-1.el8ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.21-1.el8ap.src",
"product_id": "automation-eda-controller-0:1.1.21-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.21-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.17-1.el8ap.src",
"product": {
"name": "automation-hub-0:4.10.17-1.el8ap.src",
"product_id": "automation-hub-0:4.10.17-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.17-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"product": {
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"product_id": "python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyasn1@0.6.4-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.17-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260804-1.el8ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260804-1.el8ap.src",
"product_id": "automation-gateway-0:2.5.20260804-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260804-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el8ap.src",
"product": {
"name": "receptor-0:1.6.7-1.el8ap.src",
"product_id": "receptor-0:1.6.7-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el8ap.src",
"product": {
"name": "automation-controller-0:4.6.31-1.el8ap.src",
"product_id": "automation-controller-0:4.6.31-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el8ap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"product_id": "python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"product_id": "automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"product_id": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.7-1.el9ap.x86_64",
"product_id": "receptor-0:1.6.7-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el9ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.31-1.el9ap.x86_64",
"product_id": "automation-controller-0:4.6.31-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"product_id": "python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"product": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"product_id": "automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.5.10-7.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"product_id": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.5.10-7.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"product_id": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.5.10-7.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.5.10-7.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el8ap.x86_64",
"product": {
"name": "receptor-0:1.6.7-1.el8ap.x86_64",
"product_id": "receptor-0:1.6.7-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el8ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.31-1.el8ap.x86_64",
"product_id": "automation-controller-0:4.6.31-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el8ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"product_id": "python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el9ap.ppc64le",
"product": {
"name": "receptor-0:1.6.7-1.el9ap.ppc64le",
"product_id": "receptor-0:1.6.7-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el9ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.31-1.el9ap.ppc64le",
"product_id": "automation-controller-0:4.6.31-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"product_id": "python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"product_id": "automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.5.10-7.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"product_id": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.5.10-7.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"product_id": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.5.10-7.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.5.10-7.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el8ap.ppc64le",
"product": {
"name": "receptor-0:1.6.7-1.el8ap.ppc64le",
"product_id": "receptor-0:1.6.7-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el8ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.31-1.el8ap.ppc64le",
"product_id": "automation-controller-0:4.6.31-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el8ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"product_id": "python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"product_id": "automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"product_id": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el9ap.s390x",
"product": {
"name": "receptor-0:1.6.7-1.el9ap.s390x",
"product_id": "receptor-0:1.6.7-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"product_id": "receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el9ap.s390x",
"product": {
"name": "automation-controller-0:4.6.31-1.el9ap.s390x",
"product_id": "automation-controller-0:4.6.31-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"product_id": "python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"product": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"product_id": "automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.5.10-7.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"product_id": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.5.10-7.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"product_id": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.5.10-7.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.5.10-7.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el8ap.s390x",
"product": {
"name": "receptor-0:1.6.7-1.el8ap.s390x",
"product_id": "receptor-0:1.6.7-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"product_id": "receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el8ap.s390x",
"product": {
"name": "automation-controller-0:4.6.31-1.el8ap.s390x",
"product_id": "automation-controller-0:4.6.31-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el8ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"product_id": "python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"product_id": "automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.17-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"product_id": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.17-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"product_id": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.17-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.17-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.7-1.el9ap.aarch64",
"product_id": "receptor-0:1.6.7-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el9ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.31-1.el9ap.aarch64",
"product_id": "automation-controller-0:4.6.31-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"product": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"product_id": "python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.1-2.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.1-2.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.1-2.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"product": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"product_id": "python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"product": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"product_id": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.3.0-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"product_id": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.3.0-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"product": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"product_id": "automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.5.10-7.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"product_id": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.5.10-7.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"product": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"product_id": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.5.10-7.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"product": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"product_id": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.5.10-7.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.7-1.el8ap.aarch64",
"product": {
"name": "receptor-0:1.6.7-1.el8ap.aarch64",
"product_id": "receptor-0:1.6.7-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.7-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.7-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.7-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.31-1.el8ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.31-1.el8ap.aarch64",
"product_id": "automation-controller-0:4.6.31-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.31-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.31-1.el8ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"product": {
"name": "python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"product_id": "python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-daphne@4.2.2-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.66-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.17-1.el9ap.noarch",
"product": {
"name": "automation-hub-0:4.10.17-1.el9ap.noarch",
"product_id": "automation-hub-0:4.10.17-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.17-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"product": {
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"product_id": "python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyasn1@0.6.4-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"product_id": "automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.21-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.21-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.21-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.21-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.21-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.17-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"product_id": "automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260804-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260804-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260804-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.7-1.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.7-1.el9ap.noarch",
"product_id": "receptorctl-0:1.6.7-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.7-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.31-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.31-1.el9ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.31-1.el9ap.noarch",
"product_id": "automation-controller-server-0:4.6.31-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.31-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"product_id": "automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.31-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"product": {
"name": "python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"product_id": "python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-daphne@4.2.2-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.66-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"product_id": "automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.21-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.21-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.21-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.21-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.21-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.17-1.el8ap.noarch",
"product": {
"name": "automation-hub-0:4.10.17-1.el8ap.noarch",
"product_id": "automation-hub-0:4.10.17-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.17-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"product": {
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"product_id": "python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyasn1@0.6.4-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.17-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"product_id": "automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260804-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260804-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260804-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.7-1.el8ap.noarch",
"product": {
"name": "receptorctl-0:1.6.7-1.el8ap.noarch",
"product_id": "receptorctl-0:1.6.7-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.7-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"product_id": "automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.31-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.31-1.el8ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.31-1.el8ap.noarch",
"product_id": "automation-controller-server-0:4.6.31-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.31-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"product_id": "automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.31-1.el8ap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.31-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.31-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.31-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.31-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.31-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.31-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.21-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.21-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.21-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.21-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260804-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260804-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260804-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260804-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64"
},
"product_reference": "automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x"
},
"product_reference": "automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src"
},
"product_reference": "automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64"
},
"product_reference": "automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260804-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.17-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch"
},
"product_reference": "automation-hub-0:4.10.17-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.17-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src"
},
"product_reference": "automation-hub-0:4.10.17-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-daphne-0:4.2.2-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch"
},
"product_reference": "python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-daphne-0:4.2.2-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src"
},
"product_reference": "python3.12-daphne-0:4.2.2-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.66-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch"
},
"product_reference": "python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyasn1-0:0.6.4-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src"
},
"product_reference": "python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64"
},
"product_reference": "receptor-0:1.6.7-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.31-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.31-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.31-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.31-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.31-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.31-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.31-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.21-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.21-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.21-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.21-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260804-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260804-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260804-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260804-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64"
},
"product_reference": "automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260804-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.17-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch"
},
"product_reference": "automation-hub-0:4.10.17-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.17-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src"
},
"product_reference": "automation-hub-0:4.10.17-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-daphne-0:4.2.2-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch"
},
"product_reference": "python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-daphne-0:4.2.2-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src"
},
"product_reference": "python3.12-daphne-0:4.2.2-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.3.0-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
},
"product_reference": "python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.66-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch"
},
"product_reference": "python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyasn1-0:0.6.4-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src"
},
"product_reference": "python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.7-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.7-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Chris Meyers"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-12383",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2026-06-16T10:09:09.069000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489127"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny], authentication_classes=[]) and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a trusted proxy. Additionally, the expected certificate Distinguished Name is leaked in the 403 error response body. An attacker who can reach the EDA API endpoint with a spoofed Subject header can inject arbitrary events into mTLS-protected event streams, triggering downstream automation actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is a defense-in-depth failure in EDA that becomes exploitable when combined with the gateway header-forwarding issue (tracked as a separate CVE). EDA should not rely solely on an HTTP header for mTLS authentication. The DN leak in the error response further reduces the difficulty of exploitation. EDA has been included in AAP since version 2.4. The mTLS external event stream feature and the trust-of-Subject-header pattern apply to all EDA versions that support external event streams with mTLS authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12383"
},
{
"category": "external",
"summary": "RHBZ#2489127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489127"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12383"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12383",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12383"
}
],
"release_date": "2026-07-27T19:04:53.794000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n- Ensure the EDA server is not directly accessible from untrusted networks; all traffic should route through the AAP Gateway which should perform mTLS validation.\n- If possible, configure network-level access controls to restrict which source IPs can reach the EDA backend API.\n- Monitor EDA event streams for unexpected events_received counter changes.\n- Review and rotate mTLS client certificates if unauthorized access is suspected, as the expected DN may have been leaked via the 403 error response.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34993",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-02T20:01:12.690409+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484099"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34993"
},
{
"category": "external",
"summary": "RHBZ#2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
"url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
}
],
"release_date": "2026-06-02T18:29:15.847000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
},
{
"cve": "CVE-2026-40898",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T19:00:56.584166+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484875"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service (DoS) condition where the affected server or client may crash or run out of resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in `quic-go` that allows a remote attacker to exhaust system memory by sending specially crafted HTTP/3 trailer fields. This can lead to crashes or resource unavailability in affected Red Hat products utilizing `quic-go` for HTTP/3 communication, impacting both client and server implementations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40898"
},
{
"category": "external",
"summary": "RHBZ#2484875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484875"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40898"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40898",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40898"
},
{
"category": "external",
"summary": "https://github.com/quic-go/quic-go/releases/tag/v0.59.1",
"url": "https://github.com/quic-go/quic-go/releases/tag/v0.59.1"
},
{
"category": "external",
"summary": "https://github.com/quic-go/quic-go/security/advisories/GHSA-vvgj-x9jq-8cj9",
"url": "https://github.com/quic-go/quic-go/security/advisories/GHSA-vvgj-x9jq-8cj9"
}
],
"release_date": "2026-06-04T17:43:36.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers"
},
{
"cve": "CVE-2026-44545",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-03T15:01:49.007231+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484377"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "daphne: daphne: Denial of Service via excessive WebSocket message size",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44545"
},
{
"category": "external",
"summary": "RHBZ#2484377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484377"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44545"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44545",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44545"
},
{
"category": "external",
"summary": "https://github.com/django/daphne/blob/main/CHANGELOG.txt",
"url": "https://github.com/django/daphne/blob/main/CHANGELOG.txt"
}
],
"release_date": "2026-06-03T13:17:42.907000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "daphne: daphne: Denial of Service via excessive WebSocket message size"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
},
{
"cve": "CVE-2026-54059",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-06T20:02:21.640821+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497464"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primary consequence is a Denial of Service (DoS), which could make the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via crafted PCF font data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Python Pillow library. The PcfFontFile._load_bitmaps() method reads glyph dimensions from the PCF METRICS section and passes them directly to Image.frombytes() without calling Image._decompression_bomb_check(). This allows crafted PCF font data to cause excessive memory allocation, leading to a denial of service condition. An attacker could exploit this by providing a specially crafted PCF font file to an application that uses Pillow\u0027s font loading functionality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54059"
},
{
"category": "external",
"summary": "RHBZ#2497464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497464"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54059"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
"url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x"
}
],
"release_date": "2026-07-06T18:46:09.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Do not load PCF fonts from untrusted sources. If PCF font loading is required, validate font file dimensions before passing them to Pillow, or upgrade to Pillow 12.3.0 or later which includes the fix for this vulnerability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via crafted PCF font data"
},
{
"cve": "CVE-2026-54060",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-07-06T20:02:29.509113+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497466"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library\u0027s font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54060"
},
{
"category": "external",
"summary": "RHBZ#2497466",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54060",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
"url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"
}
],
"release_date": "2026-07-06T18:49:23.788000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
},
{
"cve": "CVE-2026-55379",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-06T20:01:29.922515+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497452"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library\u0027s image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via crafted BDF font file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Pillow Python imaging library. The BDF font file parser passes attacker-controlled dimensions to Image.new() without decompression bomb validation, allowing excessive memory allocation and denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55379"
},
{
"category": "external",
"summary": "RHBZ#2497452",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
"url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"
}
],
"release_date": "2026-07-06T18:52:11.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Do not load BDF font files from untrusted sources. Applications that only process standard image formats (PNG, JPEG, etc.) and do not use BdfFontFile or ImageFont.load() with BDF files are not affected.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
},
{
"cve": "CVE-2026-55380",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-07-06T20:01:42.245051+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial-of-service vulnerability was found in Pillow\u0027s GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check. A crafted .gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. This issue is fixed in Pillow 12.3.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55380"
},
{
"category": "external",
"summary": "RHBZ#2497455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",
"url": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"
}
],
"release_date": "2026-07-06T18:50:14.789000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
},
{
"cve": "CVE-2026-59197",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-14T17:01:29.487456+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500043"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation, and ImagingExpand() computes output dimensions with unchecked signed integer arithmetic. This can lead to denial of service and limited integrity impact via heap corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Native heap out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Pillow\u0027s RankFilter API is vulnerable to a native heap out-of-bounds write when a caller supplies a very large odd filter size. Expansion runs before size validation and ImagingExpand uses unchecked signed integer arithmetic for output dimensions. A remote attacker who can drive RankFilter with attacker-controlled sizes may crash the process or corrupt heap memory. Fixed in Pillow 12.3.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59197"
},
{
"category": "external",
"summary": "RHBZ#2500043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",
"url": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9695",
"url": "https://github.com/python-pillow/Pillow/pull/9695"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr"
}
],
"release_date": "2026-07-14T16:25:23.520000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Native heap out-of-bounds write"
},
{
"cve": "CVE-2026-59885",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-07-14T18:17:12.157807+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500380"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59885"
},
{
"category": "external",
"summary": "RHBZ#2500380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
"url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
}
],
"release_date": "2026-07-14T16:40:00.515000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
},
{
"cve": "CVE-2026-59886",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T17:01:19.689422+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500041"
}
],
"notes": [
{
"category": "description",
"text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59886"
},
{
"category": "external",
"summary": "RHBZ#2500041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
"url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
}
],
"release_date": "2026-07-14T16:38:29.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-04T18:10:56+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "workaround",
"details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-7.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.7-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.31-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.31-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.21-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.21-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260804-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260804-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debuginfo-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-aiohttp-debugsource-0:3.14.1-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-daphne-0:4.2.2-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.17-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.3.0-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.7-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.7-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
}
]
}
RHSA-2026:50888
Vulnerability from csaf_redhat - Published: 2026-08-05 18:08 - Updated: 2026-09-03 15:33Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50888",
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50888.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-09-03T15:33:07+00:00",
"generator": {
"date": "2026-09-03T15:33:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50888",
"initial_release_date": "2026-08-05T18:08:33+00:00",
"revision_history": [
{
"date": "2026-08-05T18:08:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T15:33:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Abd510871ddd70ad4c77eec429f8ca4161fa6f8016bf9b21109457657d95dd206\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3A8ada7c9cb3128cca17ed34bf2c1cb2937b4a23597b655566e435ec38cd384353\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A38a6fefa4556a7ba4847569f1ca8387150ba7118bd03bee3c9829abf8d665ea5\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A8f0e7e990c9c5992ae02bbf0205ca679a65edf4a7f349443fce511c110a09171\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A83fb045b349eb3f2c1c36949d6fa40c12d1a0e5d71b15284c77141725eec0497\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Af16aeafac638580028087659b7f9ce4f61bcd53fb16138b1bab9ff5b08843748\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3A2bd80e13a7c451009b57e9a5b3cdfbd9ae7f84a5b56957e19b57e2a22c1091ae\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Aa0d471228842a02917d01cedf6fc2a64c9198d08e17d22e149ea4188ca4da3ea\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3A2b3901b9cb7f02ad5a3d449a6de2d70a2ed9e3069d01ac819becd0590a8bdcdd\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3A158a23a2839854bb8e26133a8916acad1bb305d8defb9b3d540b8b89004fa240\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Adbdb81bb2ba208c3b15025289d4f1813b1e09c9b229f71e82201ec2caf86f751\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A5d1379f5f38ea788dfb05ac5c5ee1a979bf5be8bbfa1357962a2be2b182bd784\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A8d2a32ff42f82f7839cb59f0dcddf12882a0e0132fbd6c2c94dacc67e1fadd62\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A147842ba7f5d7d777a9a17a93ec11a06439f0c8fa3aa3bb93e7905e7bb5378b1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3Afe850ff78ccd6a2536761252abe869b12e8555099b903088fb77415db810faeb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3Ab5ad8965d128b0362f978262a8cec0b97e5b8a017cc9f3bdf792d481f39cdca9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3A7bcaae762c0ae4bc631e055469984b58a6a3f63178919c783c64b04800054d3c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A092ff1a20e6b3a586c45f15322c234c509c907013a6d281e61b37dbdf8d08da6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A644c135df58d8349afd7ef6161939a6e32d0378fe3ddd79e8ebc2e6e121c0a7c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ac2cd95304bf21ddb404f75d2752edd9b0ac1dcacb5d00bc33e9a1e50a60b8263\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A8e7969ad725e923cd4b5106cd9c001274b2f599c147f94ab88c7983e77779518\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3A99bac870e85db0b22ed0881c93e811cf70eed102b47d41a3a3c1cae7e0da6f24\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3A23de179f43a4145d1b9fa681e0f15b681d7a5bc3f2a5d4237db305b7ecde4f75\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A92016ad84dd2cc43e8cd4d4a12dc5c09f9c5917d72058d4a8ec4b80f57721552\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3Aacf168c048297dd0845a9258ff05122b5ac04133983ec12185889fa4e24c949e\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af1d2cd7760f778bdde8a93fce683b01a5d35b75a5e70244ef54706be23d64e88\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A153247e5c490219a2d2c64b1dd109c273d31b08fec64e499b0da6d81d5a426b2\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aff0c33eb7f4e82f523a1f84591f42b58319f146cdf486e5f303cc1d7d102d139\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ab272964a73e058251845e12b2bc07f4398d391a7a642e4d3fdf003d7e3651d0a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A43c5e32c8b05224fcdb8fd4e02fc95a0c45c697ce02fe845cbc6c0b65011914b\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ace54373736d56eeb9fd9196e4e8d154a19e0c1be4f79a7e49c45189204b8be8c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A3d26686ce8a19183d0c1594d9fba01502db3d5bbf314f03220045546ebff21b9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ab36b2473abf86da8d1946d7f1cfc98fc915c824e674134150da42fe2c909cb40\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ac6a6924aadf33d43839b09a41cc99c6552add5cca758c30de2715c4c2d39c7c6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Abcc90bfef837fe04e832ba21034aaba9419e72458899dd7929ef117c739d83ba\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3Af54b20dafe80d52dbd0b2ac9feeef7dd469312b8e5a430669627bb7b22757f9a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3A899d90fa1e4004deecfd748edc9bc08a11b81f0e1918248288d783c0779dfaa1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Abda606880c51943c4d359dfb0dab673f5054ea3cfbe0bf7f60c080992ccba6cb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A3fc5432f460b74b4c9fd34bc8ee53dcbe75f21cd507f604a97245e5a6099eeec\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Ace7d0514a83e7c3de696c2c7530a102f43ab81443c96c335e0c9b717aae704f6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Afe19f79e90f4d3f73d37b8cd51bba6574c9e365b8dc147bdd92f2623cf223053\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A293ed031b6a8265b30dea4c61ea793b98f783c1f5919bba9d89e0807df181dce\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3Ad14b422dd794265f466b50df38052d6b65ccc44758d6970b8aaf63def82a5238\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3A31be5f7fd0a135f1251ba47c3772dd2d3804b568bee4ddb644284d1a5ba46e54\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A988f094e519e8e6f6f19d73e132a4d78e85d552d6c18ed93eb387284e02bb91c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A8144083b1b7cda5bf4c4514f695298dd9db8337f012eceb50ad55791a5aca14f\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3Ac5caaa0e3d970b115e8882ca559a3c646876b1b8715d2b1595893069d148a975\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3Ae3069473632f310db5789c9aa163357be419fd63e9207ce172eb4983ad238ce8\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3Aa693c0e3c59eb810900e3108f5917c6811040dfea4dbe7546dabadc77308d023\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3Ab12859b13938626a1139a4afc3b202a80ece5ffd72c51da782f7e0516733dd6c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:51057
Vulnerability from csaf_redhat - Published: 2026-08-06 11:09 - Updated: 2026-09-03 14:26Summary
Red Hat Security Advisory: OpenShift Source To Image 1.6.3
Severity
Important
Notes
Topic: OpenShift Source To Image 1.6.3 Release
Details: Release of OpenShift Source To Image 1.6.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
41 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "OpenShift Source To Image 1.6.3 Release",
"title": "Topic"
},
{
"category": "general",
"text": "Release of OpenShift Source To Image 1.6.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51057",
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51057.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Source To Image 1.6.3",
"tracking": {
"current_release_date": "2026-09-03T14:26:48+00:00",
"generator": {
"date": "2026-09-03T14:26:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51057",
"initial_release_date": "2026-08-06T11:09:37+00:00",
"revision_history": [
{
"date": "2026-08-06T11:09:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:26:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services 1.6.2",
"product": {
"name": "OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:source_to_image:1.6::el8"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3A2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Afc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Ada07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3Af3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Ac2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T11:09:37+00:00",
"details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T11:09:37+00:00",
"details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-41567",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-06-05T02:00:54.488930+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "RHBZ#2485356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
"url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
}
],
"release_date": "2026-06-05T00:35:50.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T11:09:37+00:00",
"details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
},
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T11:09:37+00:00",
"details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T11:09:37+00:00",
"details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:51187
Vulnerability from csaf_redhat - Published: 2026-08-06 18:23 - Updated: 2026-09-03 14:26Summary
Red Hat Security Advisory: yggdrasil security update
Severity
Important
Notes
Topic: An update for yggdrasil is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.
Security Fix(es):
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
30 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for yggdrasil is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child \"worker\" process, exchanging data with its worker processes through a D-Bus message broker.\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51187",
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51187.json"
}
],
"title": "Red Hat Security Advisory: yggdrasil security update",
"tracking": {
"current_release_date": "2026-09-03T14:26:48+00:00",
"generator": {
"date": "2026-09-03T14:26:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51187",
"initial_release_date": "2026-08-06T18:23:44+00:00",
"revision_history": [
{
"date": "2026-08-06T18:23:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-06T18:23:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:26:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.7-5.el10_0.src",
"product": {
"name": "yggdrasil-0:0.4.7-5.el10_0.src",
"product_id": "yggdrasil-0:0.4.7-5.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.7-5.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.7-5.el10_0.aarch64",
"product": {
"name": "yggdrasil-0:0.4.7-5.el10_0.aarch64",
"product_id": "yggdrasil-0:0.4.7-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.7-5.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"product": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"product_id": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.7-5.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product_id": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.7-5.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.7-5.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"product": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"product_id": "yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.7-5.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"product": {
"name": "yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"product_id": "yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.7-5.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"product": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"product_id": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.7-5.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product_id": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.7-5.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.7-5.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"product": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"product_id": "yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.7-5.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.7-5.el10_0.s390x",
"product": {
"name": "yggdrasil-0:0.4.7-5.el10_0.s390x",
"product_id": "yggdrasil-0:0.4.7-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.7-5.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"product": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"product_id": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.7-5.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"product_id": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.7-5.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.7-5.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"product": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"product_id": "yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.7-5.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.7-5.el10_0.x86_64",
"product": {
"name": "yggdrasil-0:0.4.7-5.el10_0.x86_64",
"product_id": "yggdrasil-0:0.4.7-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.7-5.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"product": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"product_id": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.7-5.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product_id": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.7-5.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.7-5.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"product": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"product_id": "yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.7-5.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.7-5.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src"
},
"product_reference": "yggdrasil-0:0.4.7-5.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T18:23:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T18:23:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T18:23:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.src",
"AppStream-10.0.Z.E2S:yggdrasil-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debuginfo-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-debugsource-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-devel-0:0.4.7-5.el10_0.x86_64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.aarch64",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.ppc64le",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.s390x",
"CRB-10.0.Z.E2S:yggdrasil-examples-debuginfo-0:0.4.7-5.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:52946
Vulnerability from csaf_redhat - Published: 2026-08-10 16:32 - Updated: 2026-09-03 14:27Summary
Red Hat Security Advisory: Multicluster Global Hub 1.8.1 security update
Severity
Critical
Notes
Topic: Multicluster Global Hub v1.8.1 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Critical.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Threats
Impact
Important
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as "global-hub" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.
9.9 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 | — |
Workaround
|
Threats
Impact
Critical
References
49 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.8.1 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:52946",
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66801",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52946.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.8.1 security update",
"tracking": {
"current_release_date": "2026-09-03T14:27:30+00:00",
"generator": {
"date": "2026-09-03T14:27:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:52946",
"initial_release_date": "2026-08-10T16:32:57+00:00",
"revision_history": [
{
"date": "2026-08-10T16:32:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:27:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Multicluster Global Hub 1.8.1",
"product": {
"name": "Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.8::el9"
}
}
}
],
"category": "product_family",
"name": "Multicluster Global Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Aeac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1786372816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Af1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1785443657"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1785763319"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1785547017"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ab421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1786067967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1785973181"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64 as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x as a component of Multicluster Global Hub 1.8.1",
"product_id": "Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.8.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
},
{
"cve": "CVE-2026-55677",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-26T17:01:45.110038+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493622"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "RHBZ#2493622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
"url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
}
],
"release_date": "2026-06-26T16:15:55.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
},
{
"cve": "CVE-2026-55969",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-27T12:01:08.265881+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "RHBZ#2507433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
"url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
}
],
"release_date": "2026-07-27T11:07:53.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
},
{
"cve": "CVE-2026-66801",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-05-26T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508045"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent (a specification for describing event data in a common way) message to the shared `gh-spec` topic. This message can spoof its source as \"global-hub\" and target other managed hubs. Due to a lack of binding between the Kafka client principal and the CloudEvent envelope, the agent on the targeted hub accepts this spoofed message and applies arbitrary resources. This vulnerability allows for fleet-wide cluster-admin privilege escalation across all managed hubs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multicluster-global-hub: Cross-hub lateral movement via shared spec-topic Write ACL and spoofable CloudEvent identity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Critical: The default Strimzi transport in Multicluster Global Hub is vulnerable to privilege escalation. A compromised managed hub can exploit weak Kafka Write ACLs on the shared `gh-spec` topic and spoofed CloudEvent sources to gain cluster-admin privileges across the entire fleet of managed hubs. This allows an attacker to achieve fleet-wide administrative control from a single compromised leaf hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
],
"known_not_affected": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66801"
},
{
"category": "external",
"summary": "RHBZ#2508045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66801"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66801"
}
],
"release_date": "2026-08-10T13:40:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-10T16:32:57+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:20dd82ac568612c5a3ed26229079a0fe338a76052e2a96c13d4a9ce88be430c3_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5292916fe3b9e955345d049a003fda95983ef54495f9af1b16d1ed7587266249_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:629c601f75821fc79cc905ddeef2301c20f89932a5bc4b2d71b86deb5da75b63_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8607fc079dce6f19c28d865f795d8ebad05cf4fec6f87e5e524d2a038430edc5_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:09f57ff7ccf26c7034221ac57936aa8ae6e6ef1b6406d0050949917ca68ce146_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0cd013a1552dae6134812eb39c9ddf46b5a5b16c8f433fdc95f16f8765a72a18_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:42d8ea192a05154b22fb0109c163791088130a10471b3c9ab03b8d55b7ee8fcf_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:eac0133e4c8130d6ee373faa034e920070db1515212bfd0c9a6d559cd31a6647_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0d1f2503b10bda1c3d075a57c7ba23759dd42101edda14edf59a4c05da0b095f_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:69229a78e4a5f37c5b3ecce7b8056fd43ab7aa3ec581a0b180e38de6866253c2_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7c3acb82221c3da1df4cba5d655ae19120f05ee22d03dc149b7c6a9db7a0c076_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ca8bf1d0e387476163e21d18dd6ab195f0348ef498fe61b058fb284d62b131cb_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9fa9b4a4984fa2c8057ec7375a613a302bf6a99ec5c6059dfb43e35fb3a29ae8_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0f4674f643df1e8cfe5b11d9c992e85b32dc915ab951c080b7456acd34069fdd_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:19e202dabb23f7c070fcf589ce4fd6f36ae7ea9813d947ace90b60e43b9aeac9_s390x",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:660024abdf32887c978d5e19b7a968c0d04d94f50937aa948d0c8b2cfd74e548_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:737736d10e925c7f8de9560552735aa0bc4404470a3a4fa5e60b63d383b28037_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:068e16c4575f853f8a292bc3f34d50ee0fdb76e410d5e6a273399d5e7533ec31_ppc64le",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:351c748dd43ee596b8565f4742569fec5dd6c41f6c0646f4b58ab1ee4bc8b603_amd64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b421850439207c883866768499822794db6c04a473f8fa80d553e3b35e595e33_arm64",
"Multicluster Global Hub 1.8.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f1f58a76e9278fbe234cf6ca99383a96fabd716186d9f1908080b4532ce3c7fb_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "multicluster-global-hub: Cross-hub lateral movement via shared spec-topic Write ACL and spoofable CloudEvent identity"
}
]
}
RHSA-2026:53374
Vulnerability from csaf_redhat - Published: 2026-08-11 10:04 - Updated: 2026-09-03 14:27Summary
Red Hat Security Advisory: rhc security update
Severity
Important
Notes
Topic: An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:53374",
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53374.json"
}
],
"title": "Red Hat Security Advisory: rhc security update",
"tracking": {
"current_release_date": "2026-09-03T14:27:34+00:00",
"generator": {
"date": "2026-09-03T14:27:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:53374",
"initial_release_date": "2026-08-11T10:04:41+00:00",
"revision_history": [
{
"date": "2026-08-11T10:04:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-11T10:04:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-03T14:27:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.3.2-5.el10_0.src",
"product": {
"name": "rhc-1:0.3.2-5.el10_0.src",
"product_id": "rhc-1:0.3.2-5.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.3.2-5.el10_0?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.3.2-5.el10_0.aarch64",
"product": {
"name": "rhc-1:0.3.2-5.el10_0.aarch64",
"product_id": "rhc-1:0.3.2-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.3.2-5.el10_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"product": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"product_id": "rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.3.2-5.el10_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"product": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"product_id": "rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.3.2-5.el10_0?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.3.2-5.el10_0.ppc64le",
"product": {
"name": "rhc-1:0.3.2-5.el10_0.ppc64le",
"product_id": "rhc-1:0.3.2-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.3.2-5.el10_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"product": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"product_id": "rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.3.2-5.el10_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"product": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"product_id": "rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.3.2-5.el10_0?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.3.2-5.el10_0.s390x",
"product": {
"name": "rhc-1:0.3.2-5.el10_0.s390x",
"product_id": "rhc-1:0.3.2-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.3.2-5.el10_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"product": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"product_id": "rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.3.2-5.el10_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"product": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"product_id": "rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.3.2-5.el10_0?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.3.2-5.el10_0.x86_64",
"product": {
"name": "rhc-1:0.3.2-5.el10_0.x86_64",
"product_id": "rhc-1:0.3.2-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.3.2-5.el10_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.3.2-5.el10_0.x86_64",
"product": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.x86_64",
"product_id": "rhc-debugsource-1:0.3.2-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.3.2-5.el10_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"product": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"product_id": "rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.3.2-5.el10_0?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.3.2-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64"
},
"product_reference": "rhc-1:0.3.2-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.3.2-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le"
},
"product_reference": "rhc-1:0.3.2-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.3.2-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x"
},
"product_reference": "rhc-1:0.3.2-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.3.2-5.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src"
},
"product_reference": "rhc-1:0.3.2-5.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.3.2-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64"
},
"product_reference": "rhc-1:0.3.2-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64"
},
"product_reference": "rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le"
},
"product_reference": "rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x"
},
"product_reference": "rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.3.2-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64"
},
"product_reference": "rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64"
},
"product_reference": "rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le"
},
"product_reference": "rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x"
},
"product_reference": "rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.3.2-5.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
},
"product_reference": "rhc-debugsource-1:0.3.2-5.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T10:04:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T10:04:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.src",
"AppStream-10.0.Z.E2S:rhc-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debuginfo-1:0.3.2-5.el10_0.x86_64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.aarch64",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.s390x",
"AppStream-10.0.Z.E2S:rhc-debugsource-1:0.3.2-5.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…